Unused obj issue

[Charlie80]

I've imported a Panorama from xml to help me do a cleanup.

Panorama manage 2 device group called "intranet" and "internet"

I already knew about an unused service "tcp-2222".

This service it's used on Intranet but unused on Internet. If I set a "unused service" filter on Internet the tcp-2222 doesn't appear.

Why?

I know that i can found it as duplicate obj but i don't need it.

I would like to export a report of unused obj that cover the case of "tcp-2222" so the service will not added on the Intranet unused report but included in the internet unused report. It's possible?

[dpuigdomenec]

Hi @Charlie80 

Expedition only takes into consideration unused objects those ones that are not used in any DG.

In your case as the service is used in one of the DGs it will be showed always as used.

Hope this helps,

Best,

[Charlie80]

Okay. Is it possible to split the two DGs into different views as a project and force Expedition to analyze the DGs separately?

One solution could be to create 2 project, import the Panorama conf and delete 1 DG.
There is another and better way?

[dpuigdomenec]

Hi @Charlie80 

You can create a project loading the FW configuration. Not based on the DG but on the FWs included in that DG.

If an object is declared but not used on that FW context, then it will be showed as not used.

Hope this helps and let me know if you have any other question,

Best regards,

David

[Charlie80]

Ah yes. Export not the Panorama Conf but the Fw-Intranet conf and Fw-internet conf in two different prj.

Thanks