Service to Application for more than 100 policies

[ghostrider]

Hello Experts

I have more than 100 policies on PA firewall with service ports and application any. Manually identifying the application for each rule from logs and creating the rule with specific application on top of that rule, is really time consuming and lot of work required. Is there any good way from Panorama or any other script or tool, I can use for this purpose?

Regards,

GR

[bmorris1]

Hello Ghostrider,

The migration tool can be used for achieving this. You can hook the tool up to your firewall and it will review your logs/rules in order to suggest app-id policies for you.

All information on the migration tool can be found here:

https://live.paloaltonetworks.com/t5/Migration-Tool/ct-p/migration_tool

hope this helps,

Ben

[ghostrider]

Hello Ben

Thanks for the reply. I am managing firewalls through Panorama. So in this case I have to integrate the Panorama into migration tool? But I am wondering this will not impact any thing because Panorama is in production.