PaloAltoNetworks / pan-os-php

Framework and utilities to easily manage and edit Palo Alto Network PANOS devices
ISC License
72 stars 15 forks source link

type=rule-compare - SRC/DST resolveaddresssummary not working correctly if add-group from top contains an overwritten address obj from local DG #759

Closed swaschkut closed 1 year ago

swaschkut commented 1 year ago

Describe the bug

pan-os-php framework is not calculating the rule SRC/DST resolveadresssummary correctly, if e.g.

secRule SRC/DST IP resolution calculation is showing 1.2.3.4 instead of 4.3.2.1

Expected behavior

secRule SRC/DST IP resolution calculation must show 4.3.2.1

Current behavior

secRule SRC/DST IP resolution calculation ist showing 1.2.3.4

Possible solution

Steps to reproduce

1. 2. 3. 4.

Screenshots

Context

Your Environment

swaschkut commented 1 year ago

760 fixed