Source IP address is set to "none"

[M.Hafi]

Hello All,

Lately I am noticing some polices that the Source IP address set to none as shown below can anyone let me know if none act like any or not?

I think yes as I created policy from Noc_OSS zone with IP add 192.168.*.* toward Default zone with IP add 192.168.*.* after I commit showed me Warnings that the below policy shadow the new one.

And is there any way I can filter polices based on none as a source IP address?

Thanks in advance,

Hafi.

[kiwi]

Hi Hafi,

I believe this article answers your question :

IP-Address-is-Set-to-NONE

Hope it helps,

-Kim.

[M.Hafi]

Hello Kim,

First of all thanks for your replay.

The article I think will not apply to my case as the article speaks about VPN (IKE Gateway) but my policy it’s a security policy.

Maybe the below interface configuration will help:

Thanks,

M.Hafi

[BenjAudy.MTL]

Hi,

Which PanOS version are you using? Can you show us the Source tab in your rule?

Benjamin

[M.Hafi]

Hi Benjamin,

It's PanOS 7.0.3, about the source tab please find below snapshoot below.

I think it's migration issue.

Thanks,

Hafi.

[santonic]

This screen let's you click OK and close it? Cause yellow fields indicate something is missing and the WebUI dialog doesn't let you proceed like this with 'ok' button'

So you have to either select any or enter some addresses. 

What kind of migration did you do? Cause with WebUI you couldn't come to such situation. Nor with CLI probably.

[M.Hafi]

Hi,

That’s the strange thing how this policy was created I can’t understand.

We did migration form Cisco WS-SVC-FWM-1 to P.A 5050.

Hafi.