About Tony_Kiser

New with creating custom miners/prototypes/etc for pulling addresses.  I'm trying to get an EDL consumable list from the below page for lookback.io.  I assume the main part I'm missing is which prototype, processor, and output to choose, as well as the necessary regex to format it correctly.  ANY help would be GREATLY appreciated.   https://dormammu.lookback.io/registry/hosts ... View more

I am using Expedition to remove unused objects from firewalls via a partial config import.  What I ran into is the tool removed an unknown number of objects that, while not used by a security policy, they are in fact used by a NAT policy!  Because of this I was only able to import services, service groups, and address groups.  Importing the new, "smaller" address list won't allow a commit because of the NAT policies that are pointing to objects that Expedition removed.   Has anyone else seen this, or have any info on why this is happening? ... View more

Historically, for a LONG time, we have created an object for every IP address and every port (for port based rules).  Over the years, this has lead to our config being HUGE.  Last tech support file from Panorama is 85MB.  With thousands and thousands of objects, my opinion is that's contributing to the performance issues we see; the fact that all these objects get sent to the firewalls, and has to be updated everytime we do a push.   So question is this; do others agee with this?  Has anyone actually backed down the object list (like removing unused, and removing objects for single IP policies, and just put the IP in the rule itself only) and then seen a performance gain?  It would be a substantial task, but possibly a useful one.  Thoughts? ... View more

I'm wanting to do some policy work (app-id migraiton) on a firewalls that is basically 100% managed by Panorama.  Don't want to mess with all others yet.  How do I get the policy set that's managed in Panorama for just one firewall int Expedition? ... View more