Optimize Your Policies with PAN-OS 9.0 (Episode 17) Learning Happy Hour

(Now in 1080p) If you have ever second guessed yourself before removing an App-ID from a rule or if you have caused an outage by removing a policy rule prematurely then this episode is for you!
Jason & Mitch explore the new PAN-OS 9.0 Policy Optimizer which might seem, on the surface, like a simple tool for telling you which rules see more or less traffic but it is much more than that!
The Policy Optimizer will help you save time and furstration in your efforts to achieve greater network security!
If you have over provisioned rules without App-IDs (a.k.a just service/port definitions) or rules with too many App-IDs allowed, the Policy Optimizer can help!
If you have unused rules that are no longer needed for currently sanctioned traffic, the Policy Optimizer can help!
If you have firewalls running PAN-OS 8.1 and older but you have Panorama and are willing to upgrade Panorama to 9.0, You CAN use the Policy Optimizer!
We hope you find this demo-heavy episode of Learning Happy Hour entertaining and helpful!

Episode Feedback: learninghappyhour@paloaltonetworks.com

Episode Timeline:
0:00 - Introduction
1:05 - Opening Discussion
2:24 - How to reduce your attack surface by eliminating port-based rules
4:39 - Port-based rule analogy
5:54 - Whats the harm with TCP 80/443?
8:45 - Typical post-migration scenario
10:00 - Jason is a HUGE FAN of the BPA!
10:34 - Port-based rule optimization demo
19:10 - Decryption changes regarding service "application-default"
22:38 - New procedural options for updating App-ID as a result of the Policy Optimizer
29:20 - Unused Applications optimized with the Add to Rule and Match Usage functions
31:19 - Policy Optimizer in Panorama 9.0
33:40 - Safely identifying and removing unused policy rules
36:28 - Getting the rest of the organization to understand and support your change proposals
38:36 - Additional tools for firewall administration and configuration improvement
39:28 - What we learned
41:28 - Encore of cheerleader Jason

Episode Resources:
• PAN-OS New Features Guide: https://docs.paloaltonetworks.com/pan-os
• Learning Happy Hour: https://www.youtube.com/playli....st?list=PLD6FJ8WNiIq
• Expedition: https://live.paloaltonetworks.....com/t5/Expedition-Mi
• AutoFocus: https://www.paloaltonetworks.c....om/products/secure-t
• Security Lifecycle Review: https://www.paloaltonetworks.c....om/resources/videos/
• Best Practice Assessment FAQ: https://live.paloaltonetworks.....com/t5/Community-Blo
• Palo Alto Networks Education Page: https://www.paloaltonetworks.c....om/services/educatio
• Prevention Architecture Page: https://www.paloaltonetworks.c....om/customers/prevent
• Request a Best Practice Assessment: https://start.paloaltonetworks.....com/best-practice-t
• Run your own Best Practice Assessment: http://go.paloaltonetworks.com/customerbpa
• Growth Mindset: https://www.khanacademy.org/ta....lks-and-interviews/c
• Mitches favorite YouTubers:
• SciShow: https://www.youtube.com/channe....l/UCZYTClx2T1of7BRZ8
• Great Big Story: https://www.youtube.com/channe....l/UCajXeitgFL-rb5-gX
• The Infographics Show: https://www.youtube.com/channe....l/UCfdNM3NAhaBOXCafH
• BBC Earth Lab: https://www.youtube.com/channe....l/UCdsOTr6SmDrxuWE7s
• LifeHacker: https://www.youtube.com/channe....l/UCYGnmkFGP4EgAOqu5
• Kurzgesagt: https://www.youtube.com/channe....l/UCsXVk37bltHxD1rDP
• Tom Scott: https://www.youtube.com/channe....l/UCBa659QWEk1AI4Tg-
• The Slow Mo Guys: https://www.youtube.com/channe....l/UCUK0HBIBWgM2c4vsP
• Smarter Every Day: https://www.youtube.com/channe....l/UC6107grRI4m0o2-em
• Beyond the Press: https://www.youtube.com/channe....l/UCveB47lgzZJ1WOf4X
• Veritasium: https://www.youtube.com/channe....l/UCHnyfMqiRRG1u-2Ms
• Real Engineering: https://www.youtube.com/channe....l/UCR1IuLEqb6UEA_zQ8
• Wendover Productions: https://www.youtube.com/channe....l/UC9RM-iSvTu1uPJb8X
• Flite Test: https://www.youtube.com/channe....l/UC9zTuyWffK9ckEz12
• Styro Pyro: https://www.youtube.com/channe....l/UCJYJgj7rzsn0vdR7f
• The Backyard Scientist: https://www.youtube.com/channe....l/UC06E4Y_-ybJgBUMtX
• How to Make Everything: https://www.youtube.com/channe....l/UCfIqCzQJXvYj9ssCo
• Asap Science: https://www.youtube.com/channe....l/UCC552Sd-3nyi_tk2B
• Vsauce: https://www.youtube.com/channe....l/UC6nSFpj9HTCZ5t-N3
• ChefSteps: https://www.youtube.com/channe....l/UCxD2E-bVoUbaVFL0Q
• Music: www.bensound.com