Viewing Rules in the Policy

[fmd]

Hi - we use Panorama and 4050s all running 4.0.5. We have a lot of rules on this firewall for one reason or another (it's a port from Checkpoint of an internal datacentre firewall where there are lots of non-web applications etc). Anyway, I can find rules in the policy GUI fine - but what I'd like to be able to do is locate a specific rule quickly in relation to the other rules around it. On Checkpoint (sorry for the coimparison!) I could easily locate an object find out what rule it was being used in (by rule number - obviously they change but it would give me the rule number at that point) - i could then scroll easily to the rule and see the rules around it. I can't see any easy way of me negotiating to a rule (especially as the web based policy with the number of rules we have is slot and jerky - compared to checkpoint). Understanding where a rule is in a large rule base (and making a decision where you place a new rule) is very important to us!

Any help appreciated!

[mschuricht]

We do not have "Where Used" functionality in the product today. You can use a specific filter by name on a particular column (eg. source/member eq '<source address object name>') to thin down the rules and then remove the filter to view rules around the point of interest.

[mgentile]

I've noticed the same problem.  LOTS of scrolling required.

In the 3.x releases, you used be able to use the browser's 'find' function to match text anywhere in the policy.  In the 4.x releases they've changed to some sort of JS menus that work in such a way that the 'CTRL+F' will only match text that is currently rendered on screen.  Not very useful. 😞

[fmd]

Hi  mschuricht - when in the policy tab - if I use the find to find to locate a specific rule. I get only that rule in the policy window. If i then remove the filter - I do see the whole rulebase again - but NOT at the point in the rulebase where the rule i just searched for - I get taken back to the top of the rulebase again. Not very useful. I essentially want to be able to find a specific rule in the policy with a view of the rules that are around it (without having to scroll - which is not a good way of finding rules with the Palo Alto when you have a large rulebase).

[fmd]

Bump!! - Anyone help with this issue?

[frank_henry]

+1.   Probably a WAD and need feature request. If there was indexing (even hidden) then focus could be restored on cookie state.

[bpappas]

The comment by farrel_dougherty looks like a feature request (as frank_henry suggested).

Please get in touch with your sales team to make sure they can file a feature request on your behalf.

Thanks,

Benjamin