topic Re: Changing name of many Security policy from Cli in General Topics

Changing name of many Security policy from Cli

MP18 — Thu, 11 Apr 2019 21:10:02 GMT

Is ther any way to change the name of all existing security policies from the cli at once?

Re: Changing name of many Security policy from Cli

LukeBullimore — Fri, 12 Apr 2019 13:45:22 GMT

I don't think it's possible to edit a rule's name from the CLI; besides, for bulk changes, I'd recommend that you take a look at Palo Alto's 'Expedition' tool. The tool allows for things that you can't do natively on the firewall such as Multi-Edits, Bulk Changes etc.

https://www.paloaltonetworks.com/products/secure-the-network/next-generation-firewall/migration-tool

Cheers,

Luke.

Re: Changing name of many Security policy from Cli

jeremy.larsen — Fri, 12 Apr 2019 21:15:02 GMT

If you have a list of names (or just pull them from the config in the "set" formatting), you could probably script something out pretty quick with the "rename" statement in the cli.

Example from Panorama:

rename device-group grpGlobal pre-rulebase security rules grpGlobal-BlockKnownMalicious to grpWhateverYouWant

Example directly on Firewall:

rename rulebase security rules toBeChanged to newRuleName

Re: Changing name of many Security policy from Cli

MP18 — Sat, 13 Apr 2019 00:02:18 GMT

That seems very handy what i need to do is as we have 30 rules say with name

corp_security 1

corp_security 2 all the way 30 30

I need to only change the corp to say xyz like

xyz_security 1 and so on

is this possible?

Thanks for the help

Re: Changing name of many Security policy from Cli

BPry — Mon, 15 Apr 2019 00:58:48 GMT

@MP18,

The method that @jeremy.larsen described would work perfectly fine for what you need to do. The expedition tool can also do this as @LukeBullimore mentioned but I personally don't really like setting up the tool for something this easy. The CLI method would be fast and easy; you could also export the XML file, make the changes required, and them import and load the configuration back to the firewall.

Re: Changing name of many Security policy from Cli

MP18 — Mon, 15 Apr 2019 02:25:10 GMT

Many thanks for replying to the Question.

It is good to have confirmation from you.