PaloAltoNetworks / panhandler

Panhandler is a tool to manage config snippets and Skillets for PAN-OS devices
Apache License 2.0
41 stars 19 forks source link

Validation INFO category in tandem with pass-fail #141

Closed scotchoaf closed 3 years ago

scotchoaf commented 4 years ago

Working with the TAC validations and they have requested the need for another category color. Something like 'Info' with a blue or neutral color. This is for assessment checks that are information only to pull info from a device. Shouldn't have a pass/fail which may be confusing to the user.

Still can have a test construct for pass/fail messages based on content presented this is more in line with 'found' and 'not found'. Example is showing a list of configured zones not used in security policies.

Builder should be able to tag which tests are info only

scotchoaf commented 4 years ago

Instead of a 'test' snippet this could be presented as a 'show info' or similar snippet tag. This extends the validation skillets to 'assessment' models where users can capture general information in tandem with pass/fail boolean results.

I've seen some queries in the automation channel that start with 'customer wants to see all of the...' . security rules with a specific zone, app, action . profiles matching a specific condition . panorama device-groups or template attributes (eg. multi-tenancy, multi-site)