So, I, like a number of people, converted from Cisco to PAN. We had a consultant in to help with the conversion, and he was assisting with the rule cleanup. However, a) a lot of rules came straight across as it was time-critical, so they are service based, and b) I have trouble wrapping my head around app-based policies. Is there a tool that can help with converting all of my port/protocol based rules to app policies? Something like the conversion tool, but for use post-cutover as opposed to during the conversion? I just had to dump a list of policies for an auditor, and realized that we should be cleaning up so that humans that aren't us have a chance of reading/understanding these. 😉 Thanks! Rich
... View more