Expedition was conceived to reduce the time and efforts a security admin needs to improve and optimize their Palo Alto Networks configurations. Following that effort, we have added, within Expedition, support not only to run a BPA analysis if not also be able to remediate some of the failed checks (all related to Device Config) and now integration with the project IronSkillet. https://github.com/PaloAltoNetworks/iron-skillet
In Expedition there are many different ways to setup a filter. Let's start from the begining
Case A) Project Dashboard:
When you click on one of the counters from the PROJECT STATISTICS Expedition will set a filter and will jump into the object selected. If you click on services Duplicated counter this is the filter will take action plus you will be transported to the Services view
Case B) Predefined Filters
From any objects view when we press right-click a advanced menu will be shown, one of the options its called predefined filters, just open the list and select the one you want to automaticaly create and apply the filter.
Right-click over one service
Each type of object can have their own predefined filters but usually they are common between them
Case C) Custom Filters
Click on Filters from the Objects or Policies view to get access to the Filter assistant
Access to Filter Assistant
A new window will show up. From here we can create our custom filter
Scope: Where this filter will apply, The more number of objects you add to the scope will reduce the amount of fields common between them to be able to search by, like if you select as scope address and addressgroups you can search only by name, tag and description becasue those are the fields in common, if you only select address all the fields related to address can be used to search like ipaddress, cidr, etc...
Field: the field we want use to filter
Operator: It can be equal, or contains, etc
What to search: Text we want to search on the selected field.
to CREATE the filter click on the plus button
Creating custom filter
To Apply the new filter we have to select the filter from AVAILABLE and DROP into ACTIVE folder
Click on APPLY FILTER
Edit Custom Filter
From the Objects and Policies views you can see if there is any Active filter and Clear them all
Remember when creating a custom filter, first add to the available filters and then drop it into the ACTIVE to apply the filter.