Tool to help map out your PA configuration

Reply
Highlighted
L1 Bithead

Tool to help map out your PA configuration

I need to go through my PA and map out the security zones, NAT rules, and so on that have accumulated over the years and I need a tool to help me scrub through the configution and sort out what is going on.  I heard there was a tool called Clikr or Clickr or something like that that is an open source tool that is supposed to help with this kind of thing but I'm looking for it and can't find it.  Can anyone tell me what this tool is or another free tool or 30 day eval or something that can help me do this?  Thanks!

Highlighted
L7 Applicator

I'm not aware of any free tools, but you could try to get a demo of Tuffin or Firemon that support Palo Alto.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
Highlighted
L1 Bithead

ok thanks - can either of them map out your zones, networks, gateways, vsyses and so on and give you a diagram of visual representation?

Highlighted
L7 Applicator

Yes, they attempt to discover and map out the network topology.  But you would need to add all of the relevant routers in addition to the firewalls for the most accurate results.  And they are licensed by the nodes you put into the system.  And the discovery is not always perfect requiring some manual tweaks.

 

But once they successfully have the topology they can also help in making sure that all of the necessary rules along a communication path are in place end to end.

Steve Puluka BSEET - IP Architect - DQE Communications (Metro Ethernet/ISP)
ACE PanOS 6; ACE PanOS 7; ASE 3.0; PSE 7.0 Foundations & Associate in Platform; Cyber Security; Data Center
Highlighted
L2 Linker

If its just the zones/interfaces etc you want and not a network map you could try the Migration Tool, have not used it for some months but seem to remember you can export it to XML and from there you can use Excel or just about anything to carve it up or manipulate it how you want...

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!