How To: Search And Replace Objects

Printer Friendly Page

The MT comes with a nice feature that allows you to replace objects in your rules or groups.

This feature is located in the context menu on the security rules, address (and groups) and services (and groups). Right-Click in one Security Rule or one object and select "Search & Replace"

  Screen Shot 2015-07-09 at 12.59.41.png Screen Shot 2015-07-09 at 16.09.59.png

If we select an address for example and then we click on Search & Replace a new window will be opened with the selected object to be searched and see where is used. Press Enter or click on Search to see all the objects that matches that name. Then select from the list the object and this will show us where is used the object, if its a member inside a group, is in what security or nat rules.

We can select from all the locations we found and add to replace by selecting the button "Add to Replace". Open the Tab called Replace and then select again the objects and locations to be replaced by and then select by what object we want to replace. In this example by an address

Screen Shot 2015-07-10 at 10.56.30.png

After that click on Replace All.

Advanced Features.

We can replace Invalid Services by the right App-ID as well with this functionality. Let's see how to proceed:

  1. Go to the Services Tab And select the "Invalid" Filter.
  2. Select the Invalid Service and Right-Click to open the context menu and select the "Search & Replace" function
  3. Press Enter to search where is used the service
  4. If its used in Groups as a member Click on Add to replace, And do the same from the Rules if there is any.
  5. Go to the Replace Tab and select replace by "Application" and then type the right App-ID. 2 new checkboxes will appear.
    1. Split Rules when needed: In the case where a Rule has more than one service in the replace will clone that rule to add the new App-ID in and remove the service from the cloned rule. If there is only one service in the rule the replace will remove the service and add the App-ID only.
    2. Remove Service from Group: If the service is inside a group the replace will remove the service from the group but then it will search where is used that group to clone the rule to add the new App-ID because we removed the service from the group.

Screen Shot 2015-07-10 at 11.07.44.png

Click on Replace All.

Important: After replace all the Objects you have to recalculate the Used Objects. The tool is not doing every time you replace something to avoid to introduce latency and waiting time to this process. To recalculate the Used Objects just go the Objects Tab and from the bottom bar click on the green Ballon.

Screen Shot 2015-07-10 at 11.19.06.png

This process can introduce new cloned rules and sometimes this can be an issue due a duplicated rule names, the cloned rules will hace the prefix "Cl-" plus the rule name. You can check for duplicated rule names and remediation from this other document: How To: Search Duplicated Rules by Name

Hope this helps

Tags (1)
Ask Questions Get Answers Join the Live Community
Version history
Revision #:
1 of 1
Last update:
‎07-10-2015 02:23 AM
Updated by: