Edit Security Policies simultaneously

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Edit Security Policies simultaneously

L1 Bithead

Hi All,

I was wondering how can I edit all the security policy rules simultaneously If I want to make any change in specific field. For example I have 80 security rules and I want to change Source Address of each rule so how can I edit this field for all the 80 rules? Do I have to edit each rule individually or is there an easy way to do it? Any help would be appreciated

9 REPLIES 9

Cyber Elite
Cyber Elite

Hi @m.hassan96 

 

The WebUI does not offer a multi edit feature. But such tasks you can do easily on the CLI. When you set the output mode to "set" (set cli config-output-format set) you can display the rules you need (show rulebase security rules | match OBJECTNAME). Then copy this output to a texteditor, replace the old object with the new one and paste the lines to the CLI.

Cyber Elite
Cyber Elite

Hello,

You can also download the XML config, modify it, then upload it. Just be carefull.

 

Cheers!

@m.hassan96,

XML is my preferred way of modifying the configuration as you can put the XML file itself directly into source control. As @OtakarKlier  mentioned you just have to ensure that you don't mess up the formatting, however the validation process (either ran seperatly when loading the config or during the commit process) should catch any issues you may make. The firewall also won't actually load a malformed XML file. 

L3 Networker

Make sure to replace it with an object if possible instead of an address so you only have to change it in 1 place on the future!

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!