Policy Optimizer - Manage Unused Rules

This playbook helps identify and remove unused rules that do not pass traffic in your environment.

PAN-OS Policy Optimizer (beta) · 25 tasks · 3 inputs · 0 outputs

Inputs

  • slack_user — Slack user to notify about unused rules.
  • email_address — User email address to notify about unused rules.
  • auto_commit — Specifies whether you want to auto-commit the configuration for the PAN-OS policy changes automatically (Yes/No).

Commands used

pan-os-delete-rule pan-os-po-get-rules

Flowchart

yes yes yes yes Delete rule yes yes Yes yes Start Start PAN-OS - List unused rules - pan-os-po-get-rules PAN-OS - List unused rules pan-os-po-get-rules Is PAN-OS Policy Optimizer integration available? - IsIntegrationAvailable Is PAN-OS Policy Optimize... IsIntegrationAvailable Done Done Manage unused rules Manage unused rules Are there any unused rules? Are there any unused rules? Notify about unused rules Notify about unused rules Send mail Send mail Is there an email address? Is there an email address? Is there a Slack user? Is there a Slack user? Take action Take action Choose action to take Choose action to take Delete Rules Delete Rules Manual Remediation Manual Remediation Is PAN-OS integration enabled? - IsIntegrationAvailable Is PAN-OS integration ena... IsIntegrationAvailable Manually handle unused rules Manually handle unused rules PAN-OS - Delete rules - pan-os-delete-rule PAN-OS - Delete rules pan-os-delete-rule Auto-commit configuration input enabled? Auto-commit configuration... PAN-OS Commit Configuration - PAN-OS Commit Configuration PAN-OS Commit Configuration PAN-OS Commit Configuration Automatically commit PAN-OS configuration? Automatically commit PAN-... Manually commit PAN-OS configuration Manually commit PAN-OS co... Choose rules to delete Choose rules to delete Send Slack message Send Slack message No communication input configured? No communication input co... Ask by task only Ask by task only