topic Re: Replace 'srcloc' for RFC1918 IPs? in General Topics

Replace 'srcloc' for RFC1918 IPs?

ptrivino — Fri, 17 Feb 2017 17:48:45 GMT

We are using the 'srcloc' field in our logs, and it's pretty handy for Out-->In traffic. But for In-->Out traffic, we get the "10.0.0.0-10.255.255.255' value. This is MUCH too large and a lot less useful. Is there a way to edit the table so that we use a custom code for RFC1918 addresses instead?

Re: Replace 'srcloc' for RFC1918 IPs?

nextgenhappines — Fri, 17 Feb 2017 21:18:20 GMT

Yes, you need to create custom region on the firewall,

https://www.paloaltonetworks.com/documentation/71/pan-os/web-interface-help/objects/objects-regions

Note, it is only support IPv4 only as of PANOS 8.0

Re: Replace 'srcloc' for RFC1918 IPs?

ptrivino — Mon, 27 Feb 2017 17:46:34 GMT

I haven't tried this yet but it certainly seems to be what I want. Thanks for the reply.