Security Policy

[paloaltousername]

hello

we have taken over support of a PA 

there are a number of entries configured under the Security policy 

our customer has reported an issue that we are trying to troubleshoot 

can I use packet trace or packet capture to see what policy an IP Address is using ?

[PavelK]

Hello @paloaltousername

if you want to verify a match of security policy you can use security policy match feature either in GUI or CLI. Below are corresponding KBs:

How to perform Policy Match and Connectivity Tests from the Web Interface

How to Test Which Security Policy Applies to a Traffic Flow

Kind Regards

Pavel

[MP18]

@paloaltousername  Also under traffic logs you can filter by source and destination IP and port it will show you which Rule it is hitting.

Regards