show address | analyze
Paste a PAN-OS configuration
// address objects, groups, services and security rules
· set commands or <config> XML
· everything is analyzed in your browser — your
firewall configuration never leaves your browser
Summary
// what was assessed, and what could not be — an analyzer that hides its blind spots can make an incomplete result look like "all clear"
Findings
// proven follows from the pasted text alone · warning rests on one stated assumption · indeterminate cannot be settled without information that is not in the configuration
Security rules
Objects
Groups
Lines not understood
// nothing is dropped silently: anything the parser could not read is listed here with its line number
Normalized set commands
// the parsed model written back out — feed this to a diff against your original to see exactly what was understood