https://github.com/paloaltonetworks/unused-rules
This utility queries the firewall and out provides information on Unused rules.
https://github.com/paloaltonetworks/unused-rules
pan-os
Last synced: 4 months ago
JSON representation
This utility queries the firewall and out provides information on Unused rules.
- Host: GitHub
- URL: https://github.com/paloaltonetworks/unused-rules
- Owner: PaloAltoNetworks
- License: mit
- Created: 2022-09-16T19:08:57.000Z (over 2 years ago)
- Default Branch: main
- Last Pushed: 2022-09-16T20:07:04.000Z (over 2 years ago)
- Last Synced: 2024-12-26T23:56:28.116Z (5 months ago)
- Topics: pan-os
- Language: Go
- Homepage:
- Size: 9.77 KB
- Stars: 3
- Watchers: 4
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Support: SUPPORT.md
Awesome Lists containing this project
README
# Unused-Rules
This utility queries the firewall and out provides information on Unused rules.
# Prerequisites
Requires GO installed in your system. Use this [link](https://go.dev/doc/install) to download GO.
# How to use the tool
Set up environmental variables on your system for the following:
* Firewall IP or FQDN
* Firewall Usernane
* Firewall Password
Update the variables in the main package.
```
var (
hostname = os.Getenv("SITEAFW") -- Change "SITEAFW" to match your enviromental setting for the firewall fqdn or IP address
user = os.Getenv("PANOUSER") -- Change "PANOUSER" to match your enviromental setting for the firewall's username.
password = os.Getenv("PANOPWD") -- Change "PANOPWD" to match your enviromental setting for the firewall's password.
months = 10 -- Change to the number of past months you want to check for last hits. In this example the script will looks for rules with no hits for the last 10 months from today.
)
```
# Sample Output
```
*****Rules with Zero Hit Count*****
Name:Block_Malicious_Inbound HitCount:0
Name:Office-To-Lab-Networks HitCount:0
Name:Client-To-AWS-Health-Dashboard HitCount:0
Name:SOC-To-Internet HitCount:0
Name:External-To-GP HitCount:0
Name:GP-To-Internal HitCount:0
Name:GP-To-Outside HitCount:0
Name:External-To-CIE HitCount:0
Name:External-To-All-No-Profile HitCount:0
***** Rules with no hit count for the last 10 Months *****
```