Edit Security Policies simultaneously

[m.hassan96]

Hi All,

I was wondering how can I edit all the security policy rules simultaneously If I want to make any change in specific field. For example I have 80 security rules and I want to change Source Address of each rule so how can I edit this field for all the 80 rules? Do I have to edit each rule individually or is there an easy way to do it? Any help would be appreciated

[vsys_remo]

Hi @m.hassan96 

The WebUI does not offer a multi edit feature. But such tasks you can do easily on the CLI. When you set the output mode to "set" (set cli config-output-format set) you can display the rules you need (show rulebase security rules | match OBJECTNAME). Then copy this output to a texteditor, replace the old object with the new one and paste the lines to the CLI.

[OtakarKlier]

Hello,

You can also download the XML config, modify it, then upload it. Just be carefull.

Cheers!

[BPry]

@m.hassan96,

XML is my preferred way of modifying the configuration as you can put the XML file itself directly into source control. As @OtakarKlier  mentioned you just have to ensure that you don't mess up the formatting, however the validation process (either ran seperatly when loading the config or during the commit process) should catch any issues you may make. The firewall also won't actually load a malformed XML file. 

[OGMaverick]

Make sure to replace it with an object if possible instead of an address so you only have to change it in 1 place on the future!