Next-Generation Firewall
Pre-Change Policy Analysis Reports
Table of Contents
Pre-Change Policy Analysis Reports
Provides information about pre-change policy analysis
reports.
Where Can I Use This? | What Do I Need? |
|---|---|
|
|
Select an analysis report whose status is completed to view the results of the
policy analysis. You can view the results of the analysis.
Intent Satisfaction Results
From the list of analyses under Analysis Requests,
click an analysis to view its analysis results. These results include:
- Summary of the analysis with details about device groups and the anomaly count.
- Click the name of a device group to view the result of the intent satisfaction analysis:
- Intent Fully Met—Your security rule is a duplicate of one of the existing rules in the device group.
- Intent Partially Met—Your security rule is partially meeting the intent of one of the existing rules in the device group.
- Intent not met—Your security rule is a unique rule that is not present in the device group. You can add this rule to the device group.
- View the results of the analysis for the new security rule intent.
In this example, there are two rules. The intent of the first rule matches fully with existing rules and the intent of the second rule matches partially with the existing rules. - View the details of the new security rule and check the intent satisfaction results.
In this example, all the attributes of the new rule intent rule 1 matches the attributes of the existing rule Shared Rule 1. The intent of the new rule fully matches the intent of the existing rule. Therefore, you need not add this new rule to the configuration.