Tcp service report for rules

[clyde.franklin]

Is there a report that I can run that will show me every rule that has tcp service applied? For example let's say migration tool is not an option and I do not want to scroll through 3000 rules to manually look. Or can I can export all rules and somehow use excel filtering on service field

[Raido]

Export to Excel works. I have tried it.

Did not go through this guide to verify step by step at the moment but you get the basics.

https://indeni.com/how-to-export-palo-alto-networks-firewalls/

[BPry]

@clyde.franklin,

It looks like the guide that @Raido shared is valid and will work appropriately. Personally I find it easier to export the XML directly and look at it that way you can look at the rules directly and look at the <service> setting which will list all <member> listing. Excel works perfectly fine though.

[vsys_remo]

I also prefere the XML and in combination with the very powerful xpath "language" this task could be done with a one-liner and will give you all the rules with service objects in one view

[clyde.franklin]

Thanks  all I used Pan-configurator and was able to get it pretty easy:

bash-3.2$ php rules-edit.php in=api://x.x.x.x actions=exportToExcel:rules.xls location=PALO-TIAA-FWHA03-QIC ruletype=security

   - object 'QIC-C3_IS_T3' passing through Action='exportToExcel' Args: filename=rules.xls, additionalFields=,

   - object 'QIC-C3_IS_T1' passing through Action='exportToExcel' Args: filename=rules.xls, additionalFields=,

   - action 'exportToExcel' has tasks to process before shutdown.