topic policy muliple search syntax in General Topics

policy muliple search syntax

helfman — Thu, 03 Nov 2016 22:19:24 GMT

I have a large list of IP addresses that I need to search on. I am not necessarily interested in if these systems are getting traffic, but moreso interested if they are present in any policies.

Is there a way to search for multiple host/net objects in the Policies tab in one search, or does this need to be done serially?

Thanks!

-jgh

Re: policy muliple search syntax

hzayed — Thu, 03 Nov 2016 22:42:08 GMT

Hi jgh,

I don't believe that there is a way to search for this directly in the GUI. However, one way to achieve this is to go to CLI and do the following:

> set cli config-output-format set (default format is xml)
> configure
# show rulebase

This will print out all the security rules in text. You can then copy the text and search in it using "grep" commands on a linux machine. Or you can even use notepade++, it has a plugin that provides this feature, name is "search+".

Hope this helps,

Haytham

Re: policy muliple search syntax

reaper — Mon, 07 Nov 2016 10:57:03 GMT

if you know the object names you can chain searches with the 'or' function, but this will only work for exact/partial matches

(source/member eq '192.168.0.91') or (source/member contains '10.0.')