03-10-2020 09:16 PM
Hi,
i have done with setup machine learning
it analysed 1 firewall's 1 day log and populated 2080 policies
and 13518, still i have to analyze the logs for 29 days
I am afraid how i am going to optimize my newly populated firewall rules and how i am going to push the policies into firewall
kindly help to advise on this.
03-12-2020 02:11 AM
That depends on your current system and enterprise network consumption.
You do not really need to import all the fields once you have analyzed the ML, and also, you do not need to import all the rules either.
For instance, you may decide to import (for some applications) only the From zone, To zone, apps, services and destinations, and later use the Merge features to join several rules that may have these fields in common.
If you desire, we could prepare a Zoom session with some of the Expedition team and we will also use this as an opportunity to capture the Use Case and document it for other users.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
