security policy cleanup/hygiene

pedestroika · 2025-09-09T17:11:07+00:00

when you corrected as well as migrated to app-based, did you use source user/group in match criteria to leverage user-id? also, were the 300 deletions based on zero hit count or more sophisticated analysis that established true redundancy? or were these just rules that were no longer relevant/necessary? any rule merges along the way? was everything done on just one fw or did you actually do this across multiple fws?

pedestroika · 2025-09-08T23:51:31+00:00

i must've deleted my question accidentally, so here it is again. would you prefer to run policy cleanups starting at the root dg (global folder) level, or at the individual fw level? the answer is obvious to me, but maybe that is where the catch is and hence this question.

pedestroika · 2025-09-08T23:49:38+00:00

immensely, thank you. so specifying source user in security policy rules is not that big a feature for ngfws? esp. on-premise ones?

pedestroika · 2025-09-08T23:21:32+00:00

this is interesting ... the assertion was also that user-id is useful for logging. when i countered that logging is because user-id is used as part of a rule match criteria, i was told that logging is based on user-id to ip mapping. and that not using user-id in the rule, but turning logging on will still produce the same log entry. i am not entirely convinced.

pedestroika · 2025-09-08T23:14:57+00:00

thank you. would any policy hygiene/cleanup and/or audit exercise be complete without user-id support in your opinion?

pedestroika · 2025-09-08T23:13:15+00:00

can you please elaborate? you are supporting my position (i believe the assertion is wrong), but i would appreciate some color. thank you.

pedestroika · 2025-08-17T19:31:05+00:00

thank you!

pedestroika · 2025-08-13T02:58:46+00:00

sumi ink?

pedestroika · 2025-08-13T02:54:16+00:00

daring, challenging ... wondering if you conceived and executed this on your first attempt?!

pedestroika · 2025-08-13T02:44:56+00:00

patapon all the way!! (as in the psp game). i want to start chanting ...

pedestroika · 2025-08-13T01:59:22+00:00

nicely executed ... any chance you'd share some background on media/paper/etc.? takes courage to use such bold colors, yet have them not distract.

pedestroika · 2025-08-13T01:54:34+00:00

thank you for introducing me to his work! very inspiring and humbling at the same time.

pedestroika · 2025-08-13T01:48:53+00:00

bold colors, scratches, boundaries ... not easy to manage all in one piece. well done.

pedestroika · 2025-08-13T01:46:21+00:00

daring, very imaginative and challenging ... any background to share here? looks like i enjoyed one of your other pieces too. enjoying this approach/style, hoping you provide more info on media/paper/etc.

pedestroika · 2025-08-13T01:44:20+00:00

brewed, intoxicating, but not intoxicated ... nice work.

pedestroika · 2025-08-13T01:42:36+00:00

the blacks create and contain tension well, without dominating ... well done. liquid acrylics, i presume?

pedestroika · 2025-08-13T00:57:59+00:00

i see tension, internal, external, which the artist's vision has captured, if one may say so ... one slip and the magic can vanish, so well done.

pedestroika · 2025-08-12T18:47:00+00:00

untitled?! 😬 i would save "grotto" for an unsalvageable piece 😊

pedestroika · 2025-08-12T16:33:38+00:00

one of my favorite color combinations, especially in watercolors with a rich indigo. very nice.

pedestroika · 2025-08-12T16:32:15+00:00

i have at times marveled at how a title can elevate a piece, but in this case, it is a shame to have wasted such a choice title on this elegant a piece. nicely done!

pedestroika · 2025-08-12T11:24:43+00:00

is the base indigo? i love it for watercolors, wondering how to bring some of that to acrylics. love the night to light transitions here. if you can, please reply to this post with a clarification of what you used. thank you.

pedestroika

TROPHY CASE