Automating security rules clean up

[PSLNOC]

Hello everyone,

We are wondering if anyone have experience in listing out all security rules in Palo Alto Firewall and get the 'last used' field from the rules using any API.

We are looking into reviewing all our rules and perform clean up to unused rules. Appreciate if anyone can share some experience in handling such task. We tried to use the API but could not find a suitable one and could not get the 'last used' field from each security rules.

Thank you in advance.

[Gyanendrakumar]

It's very well documented here -Export security rule hitcount to CSV | Develop with Palo Alto Networks