{% extends 'base.html' %} {% block title %}{{ name }} - Palo Alto rules {% endblock %} {% block content %} {% with config=settings.PLUGINS_CONFIG.netbox_paloalto %} {% if error %}
{{ error_heading }}
{{ error }}
{{ error_body }}
{% else %} {% if output|length > 0 %}

Showing firewall rules involving {{ name }}

Firewalls/device groups with matching rules
{% for fw in output %} {% if fw.total_rules > 0 and fw.found_rules|length > 0%}
{% if fw.panorama %}
Panorama {{ fw.hostname }} - device group {{ fw.device_group }} - ({{ fw.found_rules|length }}/{{ fw.total_rules }} rules)
Searching for rules containing one of these address objects/address group objects: {{ fw.search_term|join:", " }}
{% else %}
Firewall rules on firewall {{ fw.hostname }} ({{ fw.found_rules|length }}/{{ fw.total_rules }} rules)
Searching for rules containing one of these address objects/address group objects: {{ fw.search_term|join:", " }}
{% endif %} {% if fw.found_rules|length > 0 %} {% for rule in fw.found_rules %} {% endfor %}
Name Source zone Source Destination zone Destination Service Application Description
{{ rule.name }} {{ rule.fromzone|join:",
" }}
{{ rule.source|join:",
" }}
{{ rule.tozone|join:",
" }}
{{ rule.destination|join:",
" }}
{{ rule.service|join:",
" }}
{{ rule.application|join:",
" }}
{{ rule.description }}
{% else %}

No matching rules found.

{% endif %}
{% endif %} {% endfor %} {% else %}
Unable to find any rules involving {{ name }}

Remember the following constraints with this tool:

  • Only one level of address group nesting is done
  • The search does not include subnets which may contain the object
  • Rules with 'any' is omitted
{% endif %} {% endif %} {% endwith %} {% endblock %}