View your policy rulebase as tag groups to
visually group rules based on the tagging structure you created.
In this view, you can perform operational procedures such as adding,
deleting, and moving the rules in the selected tag group more easily. Viewing
the rulebase as tag groups maintains the rule evaluation order and
a single tag may appear multiple times throughout the rulebase to
visually preserve the rule hierarchy.
You must create the
tag before you can assign it as a group tag on a rule. Policy rules that
are already tagged on upgrade to PAN-OS 9.0 have the first tag automatically assigned
as the Group tag. Before you upgrade to PAN-OS 9.0, review the tagged rules
in your rulebase to ensure rules are correctly grouped. You must
manually edit each tag rule and configure the correct Group tag
if your rules are grouped incorrectly after you upgrade to PAN-OS
9.0.
Create a policy rule. Refer to Policy for more information on
creating policy rules.
In the Group Rules by Tag field,
select the tag from the drop-down and click OK.
Commit your changes.
View your policy rulebase as groups.
(Panorama only) From the Device
Group, select the device group rulebase to view or view
all Shared rules.
Click Policies and select the
rulebase where you created the rules in Step 2.
Select the View Rulebase as Groups option
(at the bottom).
Rules not assigned a tag group display as None.
Perform Group operations as needed.
Click Group to perform
group operations for rules in the selected tag group.
(Panorama only) Move rules
in group to a different rulebase or device group—Move
all policy rules in the selected tag group to the Pre-Rulebase or Post-Rulebase
or move them to a different device group.
Change group of all rules—Move all
rules in the selected tag group to a different tag group.
Move all rules in group—Move all rules
in the selected tag group to change the rule priority order.
Delete all rules in group—Delete all
rules in the selected tag group.
Clone all rules in group—Clone all
rules in the selected tag group.