Policy Optimizer Layout

PAN-OS Policy Optimizer (beta) Incident

Details

IDPolicy Optimizer Layout
Groupincident
Version-1
From Version6.0.0

Layout Structure

Legacy Summary 0 sections

No sections defined.

Incident Info 11 sections

Case Details

Field IDPosition
type Col 0-2, Height: 22
severity Col 0-2, Height: 22
owner Col 0-2, Height: 22
sourcebrand Col 0-2, Height: 22
sourceinstance Col 0-2, Height: 22
playbookid Col 0-2, Height: 22

Notes

Work Plan

Linked Incidents

Team Members

Timeline Information

Field IDPosition
occurred Col 0-1, Height: 22
dbotmodified Col 0-1, Height: 22
dbotduedate Col 0-2, Height: 22
dbotcreated Col 1-2, Height: 22
dbotclosed Col 1-2, Height: 22

Closing Information

Field IDPosition
dbotclosed Col 0-2, Height: 22
closereason Col 0-2, Height: 22
closenotes Col 0-2, Height: 22

Unused Rules Count

Port Based Rules Count

Rules with Unused Apps Count

Description

Field IDPosition
usecasedescription Col 0-4, Height: 106
Unused Rules 1 section

PAN-OS Unused Rules

Unused firewalls rules found by PAN-OS Policy Optimizer.

Field IDPosition
panosunusedrules Col 0-6, Height: 44
Port Based Rules 1 section

PAN-OS Port Based Rules

Port based firewalls rules found by PAN-OS Policy Optimizer.

Field IDPosition
panosportbasedrules Col 0-6, Height: 44
Unused Applications 1 section

PAN-OS Unused Applications

Firewalls rules with unused applications found by PAN-OS Policy Optimizer.

Field IDPosition
panosruleswithunusedapplications Col 0-6, Height: 106
War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Evidence Board 0 sections

No sections defined.

Related Incidents 0 sections

No sections defined.

Canvas 0 sections

No sections defined.

{
 "detailsV2": {
  "tabs": [
   {
    "id": "summary",
    "name": "Legacy Summary",
    "type": "summary"
   },
   {
    "id": "caseinfoid",
    "name": "Incident Info",
    "sections": [
     {
      "displayType": "ROW",
      "h": 2,
      "i": "caseinfoid-fce71720-98b0-11e9-97d7-ed26ef9e46c8",
      "isVisible": true,
      "items": [
       {
        "endCol": 2,
        "fieldId": "type",
        "height": 22,
        "id": "incident-type-field",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "severity",
        "height": 22,
        "id": "incident-severity-field",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "owner",
        "height": 22,
        "id": "incident-owner-field",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "sourcebrand",
        "height": 22,
        "id": "incident-sourceBrand-field",
        "index": 4,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "sourceinstance",
        "height": 22,
        "id": "incident-sourceInstance-field",
        "index": 5,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "playbookid",
        "height": 22,
        "id": "incident-playbookId-field",
        "index": 6,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "maxW": 3,
      "moved": false,
      "name": "Case Details",
      "static": false,
      "w": 1,
      "x": 0,
      "y": 3
     },
     {
      "h": 2,
      "i": "caseinfoid-61263cc0-98b1-11e9-97d7-ed26ef9e46c8",
      "maxW": 3,
      "moved": false,
      "name": "Notes",
      "static": false,
      "type": "notes",
      "w": 1,
      "x": 2,
      "y": 3
     },
     {
      "displayType": "ROW",
      "h": 2,
      "i": "caseinfoid-6aabad20-98b1-11e9-97d7-ed26ef9e46c8",
      "maxW": 3,
      "moved": false,
      "name": "Work Plan",
      "static": false,
      "type": "workplan",
      "w": 1,
      "x": 2,
      "y": 0
     },
     {
      "displayType": "ROW",
      "h": 2,
      "i": "caseinfoid-770ec200-98b1-11e9-97d7-ed26ef9e46c8",
      "isVisible": true,
      "maxW": 3,
      "moved": false,
      "name": "Linked Incidents",
      "static": false,
      "type": "linkedIncidents",
      "w": 1,
      "x": 1,
      "y": 5
     },
     {
      "displayType": "ROW",
      "h": 2,
      "hideName": false,
      "i": "caseinfoid-7717e580-9bed-11e9-9a3f-8b4b2158e260",
      "maxW": 3,
      "moved": false,
      "name": "Team Members",
      "static": false,
      "type": "team",
      "w": 1,
      "x": 0,
      "y": 5
     },
     {
      "displayType": "CARD",
      "h": 2,
      "i": "caseinfoid-ac32f620-a0b0-11e9-b27f-13ae1773d289",
      "items": [
       {
        "endCol": 1,
        "fieldId": "occurred",
        "height": 22,
        "id": "incident-occurred-field",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 1,
        "fieldId": "dbotmodified",
        "height": 22,
        "id": "incident-modified-field",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "dbotduedate",
        "height": 22,
        "id": "incident-dueDate-field",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "dbotcreated",
        "height": 22,
        "id": "incident-created-field",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 1
       },
       {
        "endCol": 2,
        "fieldId": "dbotclosed",
        "height": 22,
        "id": "incident-closed-field",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 1
       }
      ],
      "maxW": 3,
      "moved": false,
      "name": "Timeline Information",
      "static": false,
      "w": 1,
      "x": 1,
      "y": 3
     },
     {
      "displayType": "ROW",
      "h": 2,
      "i": "caseinfoid-88e6bf70-a0b1-11e9-b27f-13ae1773d289",
      "isVisible": true,
      "items": [
       {
        "endCol": 2,
        "fieldId": "dbotclosed",
        "height": 22,
        "id": "incident-dbotClosed-field",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "closereason",
        "height": 22,
        "id": "incident-closeReason-field",
        "index": 1,
        "sectionItemType": "field",
        "startCol": 0
       },
       {
        "endCol": 2,
        "fieldId": "closenotes",
        "height": 22,
        "id": "incident-closeNotes-field",
        "index": 2,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "maxW": 3,
      "moved": false,
      "name": "Closing Information",
      "static": false,
      "w": 1,
      "x": 2,
      "y": 5
     },
     {
      "description": "",
      "h": 1,
      "hideName": true,
      "i": "caseinfoid-d6fcf2b0-50ef-11ec-9ea5-7ddd3cc8fbfd",
      "items": [],
      "maxW": 3,
      "minH": 1,
      "moved": false,
      "name": "Unused Rules Count",
      "query": "EntryWidgetUnusedRules",
      "queryType": "script",
      "static": false,
      "type": "dynamic",
      "w": 1,
      "x": 0,
      "y": 2
     },
     {
      "h": 1,
      "hideName": true,
      "i": "caseinfoid-df3dae10-50ef-11ec-9ea5-7ddd3cc8fbfd",
      "items": [],
      "maxW": 3,
      "minH": 1,
      "moved": false,
      "name": "Port Based Rules Count",
      "query": "EntryWidgetPortBasedRules",
      "queryType": "script",
      "static": false,
      "type": "dynamic",
      "w": 1,
      "x": 1,
      "y": 2
     },
     {
      "h": 1,
      "hideName": true,
      "i": "caseinfoid-ebe1eaa0-50ef-11ec-9ea5-7ddd3cc8fbfd",
      "items": [],
      "maxW": 3,
      "minH": 1,
      "moved": false,
      "name": "Rules with Unused Apps Count",
      "query": "EntryWidgetUnusedApplications",
      "queryType": "script",
      "static": false,
      "type": "dynamic",
      "w": 1,
      "x": 2,
      "y": 2
     },
     {
      "description": "",
      "displayType": "CARD",
      "h": 2,
      "hideItemTitleOnlyOne": true,
      "hideName": true,
      "i": "caseinfoid-97ef6e10-51c9-11ec-86fa-271468642c58",
      "items": [
       {
        "endCol": 4,
        "fieldId": "usecasedescription",
        "height": 106,
        "id": "ac917530-66f4-11ec-995d-0d67eb3e51ba",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "maxW": 3,
      "minH": 1,
      "moved": false,
      "name": "Description",
      "static": false,
      "w": 2,
      "x": 0,
      "y": 0
     }
    ],
    "type": "custom"
   },
   {
    "hidden": false,
    "id": "glnffqftw2",
    "name": "Unused Rules",
    "sections": [
     {
      "description": "Unused firewalls rules found by PAN-OS Policy Optimizer.",
      "displayType": "CARD",
      "h": 5,
      "hideItemTitleOnlyOne": true,
      "hideName": false,
      "i": "caseinfoid-de0a2a70-4175-11ec-a93e-0f003ff31077",
      "items": [
       {
        "endCol": 6,
        "fieldId": "panosunusedrules",
        "height": 44,
        "id": "2d1bdd70-4176-11ec-a93e-0f003ff31077",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "maxW": 3,
      "minH": 1,
      "moved": false,
      "name": "PAN-OS Unused Rules",
      "static": false,
      "w": 3,
      "x": 0,
      "y": 0
     }
    ],
    "type": "custom"
   },
   {
    "hidden": false,
    "id": "xthy6s9roq",
    "name": "Port Based Rules",
    "sections": [
     {
      "description": "Port based firewalls rules found by PAN-OS Policy Optimizer.",
      "displayType": "CARD",
      "h": 5,
      "hideItemTitleOnlyOne": true,
      "hideName": false,
      "i": "caseinfoid-20e35420-4c70-11ec-a4c2-21c114563fe2",
      "items": [
       {
        "endCol": 6,
        "fieldId": "panosportbasedrules",
        "height": 44,
        "id": "280b9aa0-4c70-11ec-a4c2-21c114563fe2",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "maxW": 3,
      "minH": 1,
      "moved": false,
      "name": "PAN-OS Port Based Rules",
      "static": false,
      "w": 3,
      "x": 0,
      "y": 0
     }
    ],
    "type": "custom"
   },
   {
    "hidden": false,
    "id": "pmmu9oyszw",
    "name": "Unused Applications",
    "sections": [
     {
      "description": "Firewalls rules with unused applications found by PAN-OS Policy Optimizer.",
      "displayType": "CARD",
      "h": 5,
      "hideItemTitleOnlyOne": true,
      "hideName": false,
      "i": "caseinfoid-a0917c60-4c70-11ec-a4c2-21c114563fe2",
      "items": [
       {
        "endCol": 6,
        "fieldId": "panosruleswithunusedapplications",
        "height": 106,
        "id": "77cb9990-4c71-11ec-a4c2-21c114563fe2",
        "index": 0,
        "sectionItemType": "field",
        "startCol": 0
       }
      ],
      "maxW": 3,
      "minH": 1,
      "moved": false,
      "name": "PAN-OS Unused Applications",
      "static": false,
      "w": 3,
      "x": 0,
      "y": 0
     }
    ],
    "type": "custom"
   },
   {
    "id": "warRoom",
    "name": "War Room",
    "type": "warRoom"
   },
   {
    "id": "workPlan",
    "name": "Work Plan",
    "type": "workPlan"
   },
   {
    "id": "evidenceBoard",
    "name": "Evidence Board",
    "type": "evidenceBoard"
   },
   {
    "id": "relatedIncidents",
    "name": "Related Incidents",
    "type": "relatedIncidents"
   },
   {
    "id": "canvas",
    "name": "Canvas",
    "type": "canvas"
   }
  ]
 },
 "edit": {
  "sections": [
   {
    "description": "Choose a use-case that will be handled by the Policy Optimizer - Generic playbook.",
    "fields": [
     {
      "fieldId": "incident_policyoptimizerusecase",
      "isVisible": true
     }
    ],
    "isVisible": true,
    "name": "Use-Case",
    "query": null,
    "queryType": "",
    "readOnly": false,
    "type": ""
   },
   {
    "description": "",
    "fields": [
     {
      "fieldId": "incident_name",
      "isVisible": true
     },
     {
      "fieldId": "incident_occurred",
      "isVisible": true
     },
     {
      "fieldId": "incident_reminder",
      "isVisible": true
     },
     {
      "fieldId": "incident_owner",
      "isVisible": true
     },
     {
      "fieldId": "incident_roles",
      "isVisible": true
     },
     {
      "fieldId": "incident_type",
      "isVisible": true
     },
     {
      "fieldId": "incident_severity",
      "isVisible": true
     },
     {
      "fieldId": "incident_playbookid",
      "isVisible": true
     },
     {
      "fieldId": "incident_labels",
      "isVisible": true
     },
     {
      "fieldId": "incident_phase",
      "isVisible": true
     },
     {
      "fieldId": "incident_details",
      "isVisible": true
     },
     {
      "fieldId": "incident_attachment",
      "isVisible": true
     }
    ],
    "isVisible": true,
    "name": "Basic Information",
    "query": null,
    "queryType": "",
    "readOnly": false,
    "type": ""
   },
   {
    "description": "",
    "fields": [
     {
      "fieldId": "incident_agentid",
      "isVisible": true
     },
     {
      "fieldId": "incident_agentsid",
      "isVisible": true
     },
     {
      "fieldId": "incident_alertcategory",
      "isVisible": true
     },
     {
      "fieldId": "incident_alertid",
      "isVisible": true
     },
     {
      "fieldId": "incident_alertname",
      "isVisible": true
     },
     {
      "fieldId": "incident_alerttypeid",
      "isVisible": true
     },
     {
      "fieldId": "incident_app",
      "isVisible": true
     },
     {
      "fieldId": "incident_appchannelname",
      "isVisible": true
     },
     {
      "fieldId": "incident_appmessage",
      "isVisible": true
     },
     {
      "fieldId": "incident_assigneduser",
      "isVisible": true
     },
     {
      "fieldId": "incident_assignmentgroup",
      "isVisible": true
     },
     {
      "fieldId": "incident_caller",
      "isVisible": true
     },
     {
      "fieldId": "incident_categories",
      "isVisible": true
     },
     {
      "fieldId": "incident_changed",
      "isVisible": true
     },
     {
      "fieldId": "incident_childprocess",
      "isVisible": true
     },
     {
      "fieldId": "incident_classification",
      "isVisible": true
     },
     {
      "fieldId": "incident_cmd",
      "isVisible": true
     },
     {
      "fieldId": "incident_cmdline",
      "isVisible": true
     },
     {
      "fieldId": "incident_commandline",
      "isVisible": true
     },
     {
      "fieldId": "incident_comment",
      "isVisible": true
     },
     {
      "fieldId": "incident_country",
      "isVisible": true
     },
     {
      "fieldId": "incident_countrycode",
      "isVisible": true
     },
     {
      "fieldId": "incident_countrycodenumber",
      "isVisible": true
     },
     {
      "fieldId": "incident_cvelist",
      "isVisible": true
     },
     {
      "fieldId": "incident_dbotprediction",
      "isVisible": true
     },
     {
      "fieldId": "incident_dbotpredictionprobability",
      "isVisible": true
     },
     {
      "fieldId": "incident_description",
      "isVisible": true
     },
     {
      "fieldId": "incident_destinationhostname",
      "isVisible": true
     },
     {
      "fieldId": "incident_destinationip",
      "isVisible": true
     },
     {
      "fieldId": "incident_destinationnetwork",
      "isVisible": true
     },
     {
      "fieldId": "incident_destinationport",
      "isVisible": true
     },
     {
      "fieldId": "incident_detectedips",
      "isVisible": true
     },
     {
      "fieldId": "incident_detecteduser",
      "isVisible": true
     },
     {
      "fieldId": "incident_detectionurl",
      "isVisible": true
     },
     {
      "fieldId": "incident_deviceexternalip",
      "isVisible": true
     },
     {
      "fieldId": "incident_devicehash",
      "isVisible": true
     },
     {
      "fieldId": "incident_deviceid",
      "isVisible": true
     },
     {
      "fieldId": "incident_devicelocalip",
      "isVisible": true
     },
     {
      "fieldId": "incident_devicemodel",
      "isVisible": true
     },
     {
      "fieldId": "incident_devicename",
      "isVisible": true
     },
     {
      "fieldId": "incident_deviceusername",
      "isVisible": true
     },
     {
      "fieldId": "incident_dsts",
      "isVisible": true
     },
     {
      "fieldId": "incident_endpoint",
      "isVisible": true
     },
     {
      "fieldId": "incident_escalation",
      "isVisible": true
     },
     {
      "fieldId": "incident_eventid",
      "isVisible": true
     },
     {
      "fieldId": "incident_eventtype",
      "isVisible": true
     },
     {
      "fieldId": "incident_filehash",
      "isVisible": true
     },
     {
      "fieldId": "incident_filemd5",
      "isVisible": true
     },
     {
      "fieldId": "incident_filename",
      "isVisible": true
     },
     {
      "fieldId": "incident_filenames",
      "isVisible": true
     },
     {
      "fieldId": "incident_filepath",
      "isVisible": true
     },
     {
      "fieldId": "incident_filepaths",
      "isVisible": true
     },
     {
      "fieldId": "incident_filesha1",
      "isVisible": true
     },
     {
      "fieldId": "incident_filesha256",
      "isVisible": true
     },
     {
      "fieldId": "incident_filesize",
      "isVisible": true
     },
     {
      "fieldId": "incident_firstname",
      "isVisible": true
     },
     {
      "fieldId": "incident_hostnames",
      "isVisible": true
     },
     {
      "fieldId": "incident_incidentlink",
      "isVisible": true
     },
     {
      "fieldId": "incident_incomingmirrorerror",
      "isVisible": true
     },
     {
      "fieldId": "incident_investigationstage",
      "isVisible": true
     },
     {
      "fieldId": "incident_isactive",
      "isVisible": true
     },
     {
      "fieldId": "incident_lastname",
      "isVisible": true
     },
     {
      "fieldId": "incident_logsource",
      "isVisible": true
     },
     {
      "fieldId": "incident_lowlevelcategoriesevents",
      "isVisible": true
     },
     {
      "fieldId": "incident_macaddress",
      "isVisible": true
     },
     {
      "fieldId": "incident_md5",
      "isVisible": true
     },
     {
      "fieldId": "incident_mobiledevicemodel",
      "isVisible": true
     },
     {
      "fieldId": "incident_objective",
      "isVisible": true
     },
     {
      "fieldId": "incident_orglevel1",
      "isVisible": true
     },
     {
      "fieldId": "incident_orglevel2",
      "isVisible": true
     },
     {
      "fieldId": "incident_orglevel3",
      "isVisible": true
     },
     {
      "fieldId": "incident_orgunit",
      "isVisible": true
     },
     {
      "fieldId": "incident_os",
      "isVisible": true
     },
     {
      "fieldId": "incident_osversion",
      "isVisible": true
     },
     {
      "fieldId": "incident_outgoingmirrorerror",
      "isVisible": true
     },
     {
      "fieldId": "incident_parentcmdline",
      "isVisible": true
     },
     {
      "fieldId": "incident_parentprocess",
      "isVisible": true
     },
     {
      "fieldId": "incident_phonenumber",
      "isVisible": true
     },
     {
      "fieldId": "incident_pid",
      "isVisible": true
     },
     {
      "fieldId": "incident_processname",
      "isVisible": true
     },
     {
      "fieldId": "incident_processpath",
      "isVisible": true
     },
     {
      "fieldId": "incident_protocol",
      "isVisible": true
     },
     {
      "fieldId": "incident_rulename",
      "isVisible": true
     },
     {
      "fieldId": "incident_scenario",
      "isVisible": true
     },
     {
      "fieldId": "incident_sha1",
      "isVisible": true
     },
     {
      "fieldId": "incident_sha256",
      "isVisible": true
     },
     {
      "fieldId": "incident_sha512",
      "isVisible": true
     },
     {
      "fieldId": "incident_similarincidents",
      "isVisible": true
     },
     {
      "fieldId": "incident_similarincidentsdbot",
      "isVisible": true
     },
     {
      "fieldId": "incident_sourcehostname",
      "isVisible": true
     },
     {
      "fieldId": "incident_sourceip",
      "isVisible": true
     },
     {
      "fieldId": "incident_sourcenetwork",
      "isVisible": true
     },
     {
      "fieldId": "incident_sourceport",
      "isVisible": true
     },
     {
      "fieldId": "incident_sourceusername",
      "isVisible": true
     },
     {
      "fieldId": "incident_srcs",
      "isVisible": true
     },
     {
      "fieldId": "incident_state",
      "isVisible": true
     },
     {
      "fieldId": "incident_subcategory",
      "isVisible": true
     },
     {
      "fieldId": "incident_tactic",
      "isVisible": true
     },
     {
      "fieldId": "incident_tacticid",
      "isVisible": true
     },
     {
      "fieldId": "incident_tags",
      "isVisible": true
     },
     {
      "fieldId": "incident_target",
      "isVisible": true
     },
     {
      "fieldId": "incident_teamname",
      "isVisible": true
     },
     {
      "fieldId": "incident_technique",
      "isVisible": true
     },
     {
      "fieldId": "incident_techniqueid",
      "isVisible": true
     },
     {
      "fieldId": "incident_tenantname",
      "isVisible": true
     },
     {
      "fieldId": "incident_threathuntingdetectedhostnames",
      "isVisible": true
     },
     {
      "fieldId": "incident_threathuntingdetectedip",
      "isVisible": true
     },
     {
      "fieldId": "incident_ticketacknowledgeddate",
      "isVisible": true
     },
     {
      "fieldId": "incident_ticketcloseddate",
      "isVisible": true
     },
     {
      "fieldId": "incident_ticketnumber",
      "isVisible": true
     },
     {
      "fieldId": "incident_ticketopeneddate",
      "isVisible": true
     },
     {
      "fieldId": "incident_urlsslverification",
      "isVisible": true
     },
     {
      "fieldId": "incident_useraccountcontrol",
      "isVisible": true
     },
     {
      "fieldId": "incident_users",
      "isVisible": true
     }
    ],
    "isVisible": true,
    "name": "Custom Fields",
    "query": null,
    "queryType": "",
    "readOnly": false,
    "type": ""
   }
  ]
 },
 "group": "incident",
 "id": "Policy Optimizer Layout",
 "name": "Policy Optimizer Layout",
 "system": false,
 "version": -1,
 "fromVersion": "6.0.0",
 "description": "",
 "marketplaces": ["xsoar"]
}