topic Re: How Does the "Highlight Unused Rules" Option Work on Panorama? in General Topics

How Does the "Highlight Unused Rules" Option Work on Panorama?

CHammock — Wed, 30 Jul 2014 14:02:48 GMT

As far as I am aware Panorama doesn't have counters so are the unused rules identified based on counters or similar from the devices in the device-group or based on traffic logs?

Re: How Does the "Highlight Unused Rules" Option Work on Panorama?

kadak — Wed, 30 Jul 2014 20:51:26 GMT

Hello CHammock

Each managed device maintains a flag for the rules that have a match. Panorama monitors each device, fetches and aggregrates the list of rules that do no have a match. On managed firewalls, that flag is reset when a dataplane reset occurs on a reboot or a restart,

Hope that helps!

Thanks and regards,

Kunal Adak

Re: How Does the "Highlight Unused Rules" Option Work on Panorama?

CHammock — Thu, 31 Jul 2014 11:18:55 GMT

That is perfect exactly what I thought would happen, as in its logical and consistent. So the fact that my panorama logs are rolling every month won't affect the highlight unused rules.

Re: How Does the "Highlight Unused Rules" Option Work on Panorama?

Demast — Thu, 31 Jul 2014 13:16:41 GMT

In an Active/Passive device pair NOT managed by panorama, would the flag be synchronized between devices?

Re: How Does the "Highlight Unused Rules" Option Work on Panorama?

minow — Thu, 23 Oct 2014 08:17:49 GMT

i also noticed that this Flag is match to a rule by its "name" so if you changed the rule name it will be marked with no hits