topic How to read palo alto config file? Is there any free tool which is available ? in General Topics

How to read palo alto config file? Is there any free tool which is available ?

yogesba — Wed, 20 Sep 2017 13:26:46 GMT

I m looking for a application or tool to read palo alto config file. Specially, we required to perform manual firewall review.

I have a nipper to find all configuration and security issues. But we are not able to understand by looking into this config file.

Please suggest me how we can read the configuration manually.

Re: How to read palo alto config file? Is there any free tool which is available ?

BPry — Wed, 20 Sep 2017 13:54:35 GMT

@yogesba,

Firemon is capable of suggesting policy improvements to you. What exactly are you having issues reading in the config file, the config is a fairly standard XML format. If you truly need a manual review of your firewall I would suggest that you hire someone your SE suggests if you do not have this ability in house.

Re: How to read palo alto config file? Is there any free tool which is available ?

c.huang — Wed, 20 Sep 2017 16:33:17 GMT

To read & modify the XML file -- use Notepad++. This will allow you to easily navigate the configurations and make change updates. See if that helps for you. Another useful command from the CLI is "set cli config-output-format set", if you're use to the normal line-by-line text format.

Re: How to read palo alto config file? Is there any free tool which is available ?

rmfalconer — Thu, 21 Sep 2017 15:28:24 GMT

I agree with c.huang, I think the easiest way to read the CLI is with the set-based output. For me, it's much easier to digest than the xml format.

Re: How to read palo alto config file? Is there any free tool which is available ?

Ben-W — Thu, 21 Sep 2017 19:46:28 GMT

Hi Yogesba!

While notepad++ works a treat, maniuplating the config in notepad++ isn't always easy, especially if you are not used to the syntax so dont forget you can always use the palo alto networks migration tool 🙂

Couldnt do it justice so check out the link below and follow the link at the bottom of the page for community page/download.

https://www.paloaltonetworks.com/products/secure-the-network/next-generation-firewall/migration-tool

Cheers,

Ben