How to read palo alto config file? Is there any free tool which is available ?

[yogesba]

I m looking for a application or tool to read palo alto config file. Specially, we required to perform manual firewall review.

I have a nipper to find all configuration and security issues. But we are not able to understand by looking into this config file.

Please suggest me how we can read the  configuration manually.

[BPry]

@yogesba,

Firemon is capable of suggesting policy improvements to you. What exactly are you having issues reading in the config file, the config is a fairly standard XML format. If you truly need a manual review of your firewall I would suggest that you hire someone your SE suggests if you do not have this ability in house. 

[c.huang]

To read & modify the XML file -- use Notepad++.  This will allow you to easily navigate the configurations and make change updates.   See if that helps for you.  Another useful command from the CLI is "set cli config-output-format set", if you're use to the normal line-by-line text format.

[rmfalconer]

I agree with c.huang, I think the easiest way to read the CLI is with the set-based output. For me, it's much easier to digest than the xml format.

[Ben-W]

Hi Yogesba!

While notepad++ works a treat, maniuplating the config in notepad++ isn't always easy, especially if you are not used to the syntax so dont forget you can always use the palo alto networks migration tool 🙂

Couldnt do it justice so check out the link below and follow the link at the bottom of the page for community page/download.

https://www.paloaltonetworks.com/products/secure-the-network/next-generation-firewall/migration-tool

Cheers,

Ben