Is it possible to identify unused objects,.? eg: address, address group, app group etc
We are using PS2050 which is taking too much time for commit ( arroung 30 minutes) so i want to remove unused objects from the device which may helps to improve commit
we have more than 700 objects defined and about 220 policies it is very difficult to identify unused objects manually in this scenario.
As csharma mentioned above, we can identify any unused policy on this PAN firewall, but I don't think there is any straight forward way to segregate unused objects i.e (address, address group, app group etc).
If there are features we currently don't have but you would like to see added, the Palo Alto SE can create a feature request for you.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!