Expedition tool project - machine learning policies tune up

[Parthipan_Krishnan]

Hi,

i have done with setup machine learning

it analysed 1 firewall's 1 day log and populated 2080 policies

and 13518, still i have to analyze the logs for 29 days

I am afraid how i am going to optimize my newly populated firewall rules and how i am going to push the policies into firewall

kindly help to advise on this.

[dgildelaig]

That depends on your current system and enterprise network consumption.

You do not really need to import all the fields once you have analyzed the ML, and also, you do not need to import all the rules either.

For instance, you may decide to import (for some applications) only the From zone, To zone, apps, services and destinations, and later use the Merge features to join several rules that may have these fields in common.

If you desire, we could prepare a Zoom session with some of the Expedition team and we will also use this as an opportunity to capture the Use Case and document it for other users.