Object references - 'where used'

Reply
Highlighted
L0 Member

Object references - 'where used'


Hi all,

I'm new to the Palo Alto's, having cut my teeth on Stonesoft, Checkpoint and Sophos.

One nice feature in those solutions was the ability to select an object (of any type) and be able to list everywhere that it was being used - from policies to groups.

I've not yet seen a way of mimicing this in PAN-OS 6.0. Is there a way, or a work-around, to achieve this?

Thanks in advance

Highlighted
L4 Transporter

Re: Object references - 'where used'

one way is to attempt to delete the object and it will give you all the rules it is used in. but there is no 'where used' button

Highlighted
L2 Linker

Re: Object references - 'where used'

There is no way to do this currently.  There is a sorta/kinda workaround found over here:  How do I find out every place an object is used?

That page also has the feature request ID so you can contact your SE and vote for this to be added to PAN-OS.

Highlighted
L0 Member

Re: Object references - 'where used'


Hi guys,

thanks for your answers - looks like Palo could do with following Checkpoints 'where used' and Stonesoft's 'References' functionality.

Highlighted
L7 Applicator

Re: Object references - 'where used'

Please vote for FR ID : 1285 which would add "where used" functionality that is not currently available.

Right now I use the following technique on the CLI configuration

Change the display of configuration to set mode:

set cli config-output-format set

the pipe the configuration to match with the address object name

show vsys | match net-192.168.1.0-24

this pulls out all the set commands that contain the object name.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
Highlighted
L4 Transporter

Re: Object references - 'where used'

As everyone said, you need to vote on the FR.  Until then, the only way to accomplish this is to use the search bar at the top of the policy.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!