How to Replace Zones in Policies

[alestevez]

There are many ways to replace Zones in your Rules but there is one that really makes a difference.

The idea in this example is replace the Zone called VPN-Didac by Untrust. So the approach we will take is filter by the Zone and see where this zone is used and then do the replace.

From within the Project navigate to Network and then click on Zones.

From there right-click on the Zone (point he mouse over the name) we want to replace, in our case VPN-Didac and select Add to filter.

This will create a new filter and we need to activate it by using drag and drop to drop it under ACTIVE folder and click on APPLY FILTER button.

Navigate to TOOLS and Search and Replace. Select from the left panel where the output from the filters are listed the Zone we want to replace and then Expedition will search in what groups or policies has been used.

In our example we will click on Security Policies and we will select all the rules where this zone was seen and we will add to Replace, the same will do with the Nat Policies shown as well. After that we will click on REPLACE.

From the REPLACE view and keeping all the elements selected choose from the combo called Replace by "Zones" and then from the next combo called "To" select the zone you want to be replaced by the one you searched.

Click on Replace All and check from the Rules the change was effectively done.

Done !

[TimmyLamar]

@alestevez

Quick question, is there any way to search and replace all policy for service group that have 2 member or 3 member or 4 member?

because we got big migration from cisco and there is a lot of service group with member more than 1, sometimes event 10 or 15 members.

my engineers are working night and day, doing manual search and replace and keep track manually, which is prone to human error.

maybe this also questions by some of other engineers as well.

cheers man from singapore

Timmy