Object references - 'where used'

[VincentBorrie]

Hi all,

I'm new to the Palo Alto's, having cut my teeth on Stonesoft, Checkpoint and Sophos.

One nice feature in those solutions was the ability to select an object (of any type) and be able to list everywhere that it was being used - from policies to groups.

I've not yet seen a way of mimicing this in PAN-OS 6.0. Is there a way, or a work-around, to achieve this?

Thanks in advance

[lewis]

one way is to attempt to delete the object and it will give you all the rules it is used in. but there is no 'where used' button

[Bradley_Melton]

There is no way to do this currently.  There is a sorta/kinda workaround found over here:  How do I find out every place an object is used?

That page also has the feature request ID so you can contact your SE and vote for this to be added to PAN-OS.

[VincentBorrie]

Hi guys,

thanks for your answers - looks like Palo could do with following Checkpoints 'where used' and Stonesoft's 'References' functionality.

[pulukas]

Please vote for FR ID : 1285 which would add "where used" functionality that is not currently available.

Right now I use the following technique on the CLI configuration

Change the display of configuration to set mode:

set cli config-output-format set

the pipe the configuration to match with the address object name

show vsys | match net-192.168.1.0-24

this pulls out all the set commands that contain the object name.

[Dz3015]

As everyone said, you need to vote on the FR.  Until then, the only way to accomplish this is to use the search bar at the top of the policy.