mirror rule sets of existing ip/host to new ip/host

Hi,

 couple of options, really depends on how many rules you have?

1/. clone the rules

2/. export as an xml file and add the new device rules.

Ian

But how do I see all the rules the original IP/host has or is on?

Hey Sophos User1175 ,

Thank you for reaching out to the community, Under the Rules and polices > Firewall rules > on the right side  Click More options  to specify the following rule actions:

Once the rule is cloned above or below based on your requirernemnt, you can edit the that clone rule according to your requirernemnt where either you can add or delete or edit the existing hosts/IP...etc 

Another way you can refer - Import export & XML Import for Internetv4 Objects.

Hi,

one method of identify the rules is in logviewer refine the view to the ip address of the device, I realise there will be many entries to review.

ian

This isn't what I want, I want to see a list of rules what the original host/ip has got and add new IP/host to the rules

Is this the best approach surely there should be a filter on the firewall rules to enter in an IP and it will list all the rules that IP is a member of?

So you mean filter out the host/IP used in the number of firewall rules used ?

Basically see what rules that ip is a member of

Hey Sophos User1175 , have you tried using the following filter?

Hi Vivek,

is there a KBA on the use of this search function. I have tried to use it and not returned any meaningful results. The source networks only allows selection of external networks/FQDNs, unless the device you are searching for is in the FQDN list you cannot use IP addressing.

Ian