Compliance Rule that excludes certain words

[mmercaldieze]

I am running a compliance to scan certain device groups on my panorama

the line I am having trouble with is:

set device-group.*pre-rulebase

So there are certain device-groups that I will need to exclude from some of these rules that are using the set device-group.*pre-rulebase

Any idea how I an set this up to maybe reference a notepad file for a list of all device-groups to reference or to exclude?

[jkrenzien]

I may not be understanding your requirement completely, likely due to my unfamiliarity with the config file in question. Here is what I think you are trying to figure out, please let me know if I am wrong.

By default 'device-group' should have 'pre-rulebase'

There are exceptions to that rule

These are each single config lines

Alright so assuming I have gotten the basics down this may work, if not can you provide a sanitized example of the config you need to exclude and that which needs to be checked.

[mmercaldieze]

You can close the ticket, I found out how to do this.

Matthew Mercaldi

Sr. Network Engineer

Eze Castle Integration, Inc.

529 5th Avenue, 7th Floor

New York, NY 10017

212.954.0713 (p)

Support Desk 212.954.0660

[dgsmith80]

Hi Matthew,

Can you share your findings so that others might benefit in the future?