Quickly Search the Security Profiles and rule attributes in a Security Policy

Quickly Search the Security Profiles and rule attributes in a Security Policy

28954

Created On 09/25/18 19:36 PM - Last Modified 07/10/26 22:31 PM

Policy

PAN-OS

Next-Generation Firewall

Resolution

Sometimes we need to know which security policy has a required security profile applied, has a log at session end or start, or is disabled.

To search security policies where—

Antivirus profile AV1 is applied. Use the following syntax:
```
profile-setting/profiles/virus/member eq AV1
```

URL filtering profile UF1 is applied. Use the following syntax:
```
profile-setting/profiles/url-filtering/member eq UF1
```
Antispyware profile AS1 is applied. Use the following syntax:
```
profile-setting/profiles/spyware/member eq "AS 1"
```

Vulnerability profile VP1 is applied. Use the following syntax:
```
profile-setting/profiles/vulnerability/member eq VP1
```

File blocking profile FB1 is applied. Use the following syntax:
```
profile-setting/profiles/file-blocking/member eq FB1
```

If we want to search for security policies, all security policies that are disabled use the following syntax
```
disabled eq yes
```

Log at session start is selected. Use the following syntax:
```
log-start eq yes
```

Log at session end is selected, use the following syntax:
```
log-end eq yes
```

A schedule profile is called. Use the following syntax:
```
schedule eq “Lunch time”
```

To search all security policies that are disabled, use the following syntax:
```
disabled eq yes
```

To search a profile group. Use the following syntax:
```
profile-setting/group/member eq name-of-group
```