Keep track of rules within a rulebase.
Where Can I Use
This? | What Do I Need? |
- Prisma Access (Managed by Strata Cloud Manager)
- NGFW (Managed by Strata Cloud Manager)
|
|
Regularly tracking and auditing the rulebase is a best practice for network
security. It involves reviewing and updating rules based on changing organizational
needs, compliance requirements, or emerging threat landscapes. Rules that are too
broad introduce security gaps because they allow applications that aren’t in use in
your network.
Your rulebase shows all configured
rules in order of enforcement.
This includes essential information such as rule names, rule types, applied security
profiles, action settings, source and destination zones, and more. You can review
and analyze this information to ensure that the rules align with the organization's
security objectives and operational requirements.
Intuitive search and filtering capabilities are also available, enabling
you to easily locate specific rules within the rulebase, manage security rules and
troubleshoot efficiently.
Each rule within a rulebase is automatically numbered; when you move or reorder
rules, the numbers change based on the new order. When you filter the list of rules
to find rules that match specific criteria, each rule, its number in the context of
the complete set of rules in the rulebase, and its place in the evaluation order is
shown.
Rule numbering reflects the hierarchy and evaluation order of shared rules, device
group pre-rules, device group post-rules, and default rules. You can view an ordered
list of the total number of rules in your configuration.