Access rule simulation

[ENMAXAdmin]

Does anyone have any idea how we can do access rule simulation from monitoring logs in PAN 820. Any automation or tool recommended?

[aleksandar.astardzhiev]

Hey @ENMAXAdmin ,

Can you explain a bit more, what are you trying to achive?

From PAN-OS 9.0 and later there is "test policy" tool build-in to the GUI. You can access it either from Device > Troubleshooting, or as button at the bottom of the Policy tab

You can use the CLI tool as well:

> test security-policy-match
+ application        Application name
+ category           Category name
+ check-hip-mask     check hip mask
+ destination        destination IP address
+ destination-port   Destination port
+ from               from
+ protocol           IP protocol value
+ show-all           show all potential match rules until first allow rule
+ source             source IP address
+ source-user        Source User
+ to                 to
  |                  Pipe through a command
  <Enter>            Finish input

But I don't understand what you meand by "from monitoring logs". The each log entry contain the name of the rule that this traffic has matched.

[OtakarKlier]

Hello,

There is a GUI version of the policy tester as well. In policies at the bottom "Test policy Match".

Hope that helps.