topic Re: Unused rules in General Topics

Unused rules

SSaady — Wed, 08 Mar 2017 20:57:35 GMT

I know it is possible to get unused rules since last reboot, but it is obvious the data is in Panorama. Is there no way to get a list of rules not used since a specified date?

https://live.paloaltonetworks.com/t5/Learning-Articles/How-to-Identify-Unused-Policies-on-a-Palo-Alto-Networks-Device/ta-p/53202

Re: Unused rules

BPry — Wed, 08 Mar 2017 22:18:06 GMT

It's an all or nothing feature. If the rule has been hit since last reboot then it isn't going to be shown as unused. I know that there is a manual way to reset this without actually restarting the thing, I can't think of it at the moment.

Re: Unused rules

kiwi — Thu, 09 Mar 2017 08:46:24 GMT

Hi @SSaady,

How about using the ACC feature ?

Add the rule usage widget and specify a custom timeframe ... any rule not showing up in the report is unused.

ACC Rule Usage

I hope this works for you.

Cheers,

-Kiwi

Re: Unused rules

pulukas — Tue, 21 Mar 2017 00:10:11 GMT

Love the new ACC lots of good stuff under the hood.

Re: Unused rules

jdprovine — Tue, 21 Mar 2017 16:09:10 GMT

I have a rule that shows unused in the ACC and on the traffic monitor but when I choose to highlight unused rules it show used and this was before and after a reboot