Search security policies of network or related IPs

[Charlie80]

Hi,

I need to migrate a vlan from a security zone to a new one.

Which is the best way to search the related rules?

Ae1.1200 10.100.15.0/24

I need to identify the rules of this network and the rules that use a specific ip like 10.100.15.20 and so one.

[TomYoung · Accepted solution]

Hi @Charlie80 ,

If you use the Global Find feature for 10.100.15, it will show you every where the string is in the config.  If you did not use objects in the security policy, the matching rules will show under the Security Rules section.

If you used address objects in the security policy, you can expand the matching address objects, and it will show you the security policy rules where those are used.  https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/firewall-administration/use-the-web-interf...

You can then click on the rule from the drop down, and you will pivot to Policies > Security to edit the rule.

The filter bar on the Policies > Security page does not show objects that match 10.100.15, which is probably why you asked.

Thanks,

Tom

[Raido_Rattameister]

One trick you can use is to search for "0.100.15.20" instead of "10.100.15.20"
If you remove one number from IP then filter is looking for exact text and don't match to 10.100.15.0/24 IPs any more.