PAN-OS Policy Optimizer (beta) (v1.1.36)
This integration introduces Policy Optimizer and DAG features that are not available through the regular PAN API
- Author
- Maciej Drobniuch and Cortex XSOAR
- Support
- community
- URL
- https://www.paloaltonetworks.com/cortex
- Categories
- Network Security
Incident fields (4)
- PAN-OS Port Based Rules
- PAN-OS Rules with Unused Applications
- PAN-OS Unused Rules
- Policy Optimizer Use-Case
Integrations (1)
- PAN-OS Policy Optimizer (Beta)
Layouts (1)
- Policy Optimizer Layout
Playbooks (5)
- Policy Optimizer - Add Applications to Policy Rules
- Policy Optimizer - Generic
- Policy Optimizer - Manage Port Based Rules
- Policy Optimizer - Manage Rules with Unused Applications
- Policy Optimizer - Manage Unused Rules
Scripts (3)
- EntryWidgetPortBasedRules
- EntryWidgetUnusedApplications
- EntryWidgetUnusedRules
README
Automate your AppID Adoption by using the PAN-OS Policy Optimizer (beta) integration and playbooks together with your Palo Alto Networks Next-Generation Firewall or Panorama.
This integration was integrated and tested with Panorama version 10.1.10.
What Does This Pack Do?
The Policy Optimizer integration in this content pack enables you to gain visibility into and control usage of security policy rules.
The playbooks in this pack also help you automate the following procedures to reduce the attack surface and safely enable applications on your network.
- Identify unused rules.
- Identify port-based rules so you can convert them to application-based rules that allow traffic or add applications to existing rules without compromising application availability.
- Identify rules configured with unused applications.
- Analyze rule characteristics and prioritize which rules to migrate or clean up.
As part of this pack, you also get out-of-the-box Policy Optimizer incident views, a full layout, and automation scripts. All of these are easily customizable to suit the needs of your organization.
For more information, visit our PAN-OS Policy Optimizer docs page.
