topic Re: Rule usage report in PanOS 8? in General Topics

Rule usage report in PanOS 8?

BoDollis — Thu, 07 Nov 2019 20:33:36 GMT

Is it possible to create (scheduled) rule usage reports in PanOS 8, ideally from Panorama on a per device group basis?

I see the rule usage data present, seems silly there wouldn't be a capability to query against it.

Rules (not) used withing last X days?

Re: Rule usage report in PanOS 8?

ihealey — Thu, 07 Nov 2019 21:50:38 GMT

PanOS 8, or 8.1?

If 8.1, then me responding is fruitless as I do not know the answer.

If 8.0, then I would recommend updating to 8.1. The coolest feature, to me, that was introduced with 8.1 is the ability to see how often rules are hit when looking at the policies on a given firewall.

Re: Rule usage report in PanOS 8?

OtakarKlier — Thu, 07 Nov 2019 21:59:28 GMT

Hello,

While I encourage all to read the release notes. Going to 9.0.4 offers additional features, including analyzing the policies over time to see if the policy could be modified with app instead of ports, etc.

But definitely move away from 8.0 since it is end of life.

https://docs.paloaltonetworks.com/resources/eol#sort=relevancy&layout=card&numberOfResults=25

Regards,

Re: Rule usage report in PanOS 8?

BPry — Fri, 08 Nov 2019 03:56:11 GMT

@BoDollis,

This deviated from your original question quickly.

Is it possible to create (scheduled) rule usage reports in PanOS 8, ideally from Panorama on a per device group basis?

There is not a way to create a scheduled report for this within any current release of PAN-OS, regardless of version. This information is exposed in the API, so it is something that could be scripted.