Policy recommendations from SaaS Security can be imported by to NGFWs manage
applications, but corresponding rules should also be deleted from NGFWs when removed in SaaS
Security.
| Where Can I Use This? | What Do I Need? |
|---|
Prisma Access Next-Generation Firewall
|
This is a core Network Security feature for NGFWs and Prisma
Access; no prerequisites needed.
|
When a SaaS Security administrator pushes
Security policy rule recommendations to a PAN-OS appliance, the
PAN-OS administrator can import those rules to gain visibility into
and control of the applications in the policy recommendation. However,
if the SaaS Security administrator deletes the rule, you should also
delete that rule from the PAN-OS appliance.
When a SaaS Security
administrator deletes a rule, the Active Recommendation column
shows the value removed (for valid rules,
the value is active).
