Expedition was conceived to reduce the time and efforts a security admin needs to improve and optimize their Palo Alto Networks configurations. Following that effort, we have added, within Expedition, support not only to run a BPA analysis if not also be able to remediate some of the failed checks (all related to Device Config) and now integration with the project IronSkillet. https://github.com/PaloAltoNetworks/iron-skillet
When seeing counters increment for Duplicated Policies, this is indicating there are policies with the exact same name, which can cause a conflict within PAN-OS and cause a commit to fail.
The Duplicated Policies do not indicate an overlap or "Shadow" of policies.
The duplicated policy count can be seen in the PROJECT STATISTICS dashboard.
To view the policies with duplicated names you can use the filter by creating a filter for:
POLICIES > Security > FILTER > MERGE > POLICIES > Security Policies > Click the box for Rule Name
Clicking on each case listed in the results will display the policies with the same name in the background. The policies displayed in the backgroud can be edited to change the names.