1. Home
    2. PAN-OS
    3. PAN-OS® Web Interface Reference Guide
    4. Policies
    5. Move or Clone a Policy Rule
    End-of-Life (EoL)
    Previous
    Next
    When moving or cloning policies , you can assign a Destination (a virtual system on a firewall or a device group on Panorama) for which you have access permissions, including the Shared location.
    To move a policy rule, select the rule in the Policies tab, click Move, select Move to other vsys (firewalls only) or Move to other device group (Panorama only), specify the fields in the following table, and then click OK.
    To clone a policy rule, select the rule in the Policies tab, click Clone, specify the fields in the following table, and then click OK.
    Move/Clone Setting Description
    Selected Rules Displays the Name and current Location (virtual system or device group) of the policy rules you selected for the operation.
    Destination Select the new location for the policy or object (a virtual system, device group, or Shared). The default value is the Virtual System or Device Group that you selected in the Policies or Objects tab.
    Rule order Select the rule position relative to other rules: Move top —The rule will precede all other rules. Move bottom —The rule will follow all other rules. Before rule —In the adjacent drop-down, select the subsequent rule. After rule —In the adjacent drop-down, select the preceding rule.
    Error out on first detected error in validation Select this option (selected by default) to make the firewall or Panorama display the first error it finds and stop checking for more errors. For example, an error occurs if the Destination doesn’t include an object that is referenced in the policy rule you are moving. If you clear this selection, the firewall or Panorama will find all errors before displaying them.
    Previous
    Next

    Recommended For You

    Recommended Videos

    Recommended videos not found.

    © 2022 Palo Alto Networks, Inc. All rights reserved.

    Techdocs Logo