Firewall Rule Risk Analyzer (PAN-OS)
rule exposure & policy scoring · runs entirely in your browser, nothing uploaded
Load different config
Export CSV
▣
Drop a PAN-OS config file, or click to browse
Parses addresses, services, rules, and zone/interface bindings — entirely client-side
Choose file
expects a full PAN-OS configuration export
▣
Role
Internet-facing
Internal segmentation
All risk levels
Critical only
High only
Medium only
Low only
None (denies)
Permit + Deny
Permit only
Deny only
All rules
Implicit permits only
Explicit ACL rules only
Any logging status
No logging only
Logged only
Any policy status
Against policy (open)
Exception accepted
Compliant only
Show inactive
\u21BA Reset to rulebase order
critical
high
medium
low
none
#
Risk
Action
Protocol
Source
Destination
Service
Logging
Interface
ACL