- Access exclusive content
- Connect with peers
- Share your expertise
- Find support resources
Enhanced Security Measures in Place: To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.
03-14-2024 04:59 AM
I've imported a Panorama from xml to help me do a cleanup.
Panorama manage 2 device group called "intranet" and "internet"
I already knew about an unused service "tcp-2222".
This service it's used on Intranet but unused on Internet. If I set a "unused service" filter on Internet the tcp-2222 doesn't appear.
Why?
I know that i can found it as duplicate obj but i don't need it.
I would like to export a report of unused obj that cover the case of "tcp-2222" so the service will not added on the Intranet unused report but included in the internet unused report. It's possible?
03-14-2024 01:41 PM
Hi @Charlie80
Expedition only takes into consideration unused objects those ones that are not used in any DG.
In your case as the service is used in one of the DGs it will be showed always as used.
Hope this helps,
Best,
03-15-2024 01:12 AM - edited 03-15-2024 01:21 AM
Okay. Is it possible to split the two DGs into different views as a project and force Expedition to analyze the DGs separately?
One solution could be to create 2 project, import the Panorama conf and delete 1 DG.
There is another and better way?
03-15-2024 01:22 AM
Hi @Charlie80
You can create a project loading the FW configuration. Not based on the DG but on the FWs included in that DG.
If an object is declared but not used on that FW context, then it will be showed as not used.
Hope this helps and let me know if you have any other question,
Best regards,
David
03-15-2024 01:24 AM
Ah yes. Export not the Panorama Conf but the Fw-Intranet conf and Fw-internet conf in two different prj.
Thanks
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!