About padkumar4

Hi I am working on integrating Firemon with Palo Alto and need to query the Palo Alto for zones. Here's what I am trying to do. Problem statement: I want to write a query that would give me the list of firewall rules with ("any" in "Destination zone" AND "Service" AND "Action" = accept ). I am able to generate a query that will give me ("any" in "Destination zone" AND "Service" AND "Action" = accept ) which is given below: query: rule{disabled=false and destination.any = true and (application.any=true or application.objectcount is empty) and service.any=true and action='ACCEPT'} This query works and give me the list of all rules with destination = any. How can I change it to destination zone =any. Thanks Padma ... View more