Related Documentation
Enable or Disable Policy Optimizer
Policy Optimizer provides many capabilities that make it easier to migrate to an application-based Security policy but you may disable it if you wish. ...
Policy Optimizer
Optimize security policy by migrating legacy rules to application-based rules and removing unused applications from rules, without compromising availability. ...
App-ID
App-ID To safely enable applications on your network, the Palo Alto Networks next-generation firewalls provide both an application and web perspective—App-ID and URL Filtering—to protect ...
Strict Default Ports for Decrypted Applications
Use application-default to safely enable applications on their most commonly-used ports. Application-default strictly enforces standard port usage even for those applications that use a different ...
Sorting and Filtering Security Policy Rules
Use application usage information to prioritize which rules to migrate from port-based to app-based rules or to clean up (remove unused apps) first. ...
Migrate Port-Based to App-ID Based Security Policy Rules
Policy Optimizer converts port-based Security policy rules to app-based rules without compromising app availability to safely enable applications. ...
Policy Optimizer Concepts
Concepts for migrating port-based Security rules to app-based rules, removing unused apps from rules, and safely enabling apps without compromising availability. ...