Related Documentation
Enable or Disable Policy Optimizer
Policy Optimizer provides many capabilities that make it easier to migrate to an application-based Security policy but you may disable it if you wish. ...
Policy Optimizer
Optimize security policy by migrating legacy rules to application-based rules and removing unused applications from rules, without compromising availability. ...
App-ID
App-ID To safely enable applications on your network, the Palo Alto Networks next-generation firewalls provide both an application and web perspective—App-ID and URL Filtering—to protect ...
Strict Default Ports for Decrypted Applications
Use application-default to safely enable applications on their most commonly-used ports. Application-default strictly enforces standard port usage even for those applications that use a different ...
Convert the Web Access Rule Using Subcategories
Convert legacy port-based HTTP/HTTPS (port 80/443) internet access rules to application-based rules. ...
Safe Application Enablement Via a Phased Transition
Migrate to App-ID based Security policy in stages to reduce the attack surface and improve network security. ...
Sorting and Filtering Security Policy Rules
Use application usage information to prioritize which rules to migrate from port-based to app-based rules or to clean up (remove unused apps) first. ...