topic Re: Tcp service report for rules in General Topics

Tcp service report for rules

clyde.franklin — Thu, 08 Jun 2017 12:13:59 GMT

Is there a report that I can run that will show me every rule that has tcp service applied? For example let's say migration tool is not an option and I do not want to scroll through 3000 rules to manually look. Or can I can export all rules and somehow use excel filtering on service field

Re: Tcp service report for rules

Raido_Rattameister — Thu, 08 Jun 2017 12:40:38 GMT

Export to Excel works. I have tried it.

Did not go through this guide to verify step by step at the moment but you get the basics.

https://indeni.com/how-to-export-palo-alto-networks-firewalls/

Re: Tcp service report for rules

BPry — Thu, 08 Jun 2017 15:35:46 GMT

@clyde.franklin,

It looks like the guide that @Raido_Rattameister shared is valid and will work appropriately. Personally I find it easier to export the XML directly and look at it that way you can look at the rules directly and look at the <service> setting which will list all <member> listing. Excel works perfectly fine though.

Re: Tcp service report for rules

Remo — Thu, 08 Jun 2017 21:16:58 GMT

I also prefere the XML and in combination with the very powerful xpath "language" this task could be done with a one-liner and will give you all the rules with service objects in one view

Re: Tcp service report for rules

clyde.franklin — Thu, 08 Jun 2017 21:22:30 GMT

Thanks all I used Pan-configurator and was able to get it pretty easy:

bash-3.2$ php rules-edit.php in=api://x.x.x.x actions=exportToExcel:rules.xls location=PALO-TIAA-FWHA03-QIC ruletype=security

   - object 'QIC-C3_IS_T3' passing through Action='exportToExcel' Args: filename=rules.xls, additionalFields=,

   - object 'QIC-C3_IS_T1' passing through Action='exportToExcel' Args: filename=rules.xls, additionalFields=,

   - action 'exportToExcel' has tasks to process before shutdown.