Access rule simulation

ENMAXAdmin — Wed, 28 Apr 2021 20:33:06 GMT

Does anyone have any idea how we can do access rule simulation from monitoring logs in PAN 820. Any automation or tool recommended?

Re: Access rule simulation

aleksandar.astardzhiev — Thu, 29 Apr 2021 08:00:10 GMT

Hey @ENMAXAdmin ,

Can you explain a bit more, what are you trying to achive?

From PAN-OS 9.0 and later there is "test policy" tool build-in to the GUI. You can access it either from Device > Troubleshooting, or as button at the bottom of the Policy tab

You can use the CLI tool as well:

> test security-policy-match + application Application name + category Category name + check-hip-mask check hip mask + destination destination IP address + destination-port Destination port + from from + protocol IP protocol value + show-all show all potential match rules until first allow rule + source source IP address + source-user Source User + to to | Pipe through a command <Enter> Finish input

But I don't understand what you meand by "from monitoring logs". The each log entry contain the name of the rule that this traffic has matched.

Re: Access rule simulation

OtakarKlier — Fri, 30 Apr 2021 21:02:35 GMT

Hello,

There is a GUI version of the policy tester as well. In policies at the bottom "Test policy Match".

Hope that helps.

topic Re: Access rule simulation in General Topics

Access rule simulation

Re: Access rule simulation

Re: Access rule simulation