03-14-2018 09:20 AM
Is there any other way to configure Log forwarding profile in all 300+ security policies in single shot.
currently there is no log forwarding profile in all 300+ policies.
So below method is not applicable:
Not through web interface but you can export config out.
It is one single xml file.
Device > Setup > Operations > Export configuration version
Pick latest one from dropdown and click ok.
Then open this xml in your favourite text editor.
Find area between:
<rule base>
<security>
<rules>
and
</rules>
</security>
Everywhere you see "</entry>" and log-setting config does not precede:
Then replace this with:
<log-setting>Log-Forwarding-Policy</log-setting>
</entry>
03-14-2018 03:09 PM
Other possibilities:
@Javith_Ali it's now up to you which way to go...
03-14-2018 01:14 PM
Is there a specific reason why you can't export the XML and modify it manually? That would be a fairly logical conclussion for what you are looking to do, and would honestly take the least amount of time. This is something you could script, but you would need to collect all of the security policy names to actually write that script.
03-14-2018 03:09 PM
Other possibilities:
@Javith_Ali it's now up to you which way to go...
03-22-2018 11:29 AM
This link might give you some hints.
In your case you need to get list of rules like @vsys_remo menioned and go from there.
05-28-2018 11:55 AM
Another option would be to dump config in "set format" to see the actual cli command. I suggest adding the log forward option to at least 1 policy so you have a reference cli command. Then you can sve this as a csv file. Then sort the relevant data and delete everything else. Then add the missing syntax. Then convert the csv back to text and paste as cli. But PAN script mode gets flaky if you paste more than 50 lines at a time. I wish they would fix that. This is why they like to merge portions of the xml file because script mode is unreliable for large pastes.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!