Expedition ML process Sumarization Rule with Network

[Stephane_Samba]

Hello Team,

For my first post on the community !

For a customer case we want to use Expedition Palo in the aim to bulid security rules from permissive security rules.

Indeed, with an additional file we have the best practices (from IT service directly) about security rules to implement its. In the past time we built our own application (based on Python) to give the results.

This approach is similar to APG Tufin , and we want to join about this mecanism by the end.

In the POC architecture we got an issue on the Expedition process Machine Learning . For that we have followed the next instructions :

• Import Logs from Logs firewall (ok)
• Import backup of configuration file (ok)
• Define the metrics on specific security rules in the goal to sumamarize them* (ok)

For the last point, we observed a different mecanism from our requirement.

In fact, we want to summarize some security rules by network. ML process got it but some cases must be excepted. In general the summarization is  wrong so.

Our question is : Does it possible to export the generated output files (files created) from CLI about the ML processing ?

Our goal is to control this step and bring some changes about that.

I join you ML process on Expedition and focus on the result. In target, we want to export this content including the red boxes. 

Thank you a lot !

[lychiang]

@Stephane_Samba you can export the ML result in to an excel file

[Stephane_Samba]

Thank you for your return but I know this feature. I'm searching to export the ML results from CLI (including much more files). From excel files output, that's only the results of security rules summarization .. Not need this content. I only try to know if there are some generated files during ML process (pre-process and post-process). In the aim to control ML process and it is possible to bring some settings incluing on this process.