Strata Cloud Manager
Manage: Config Cleanup
Table of Contents
Expand All
|
Collapse All
Strata Cloud Manager Docs
-
- Strata Copilot
- Command Center: Strata Cloud Manager
-
- Dashboard: Build a Custom Dashboard
- Dashboard: Executive Summary
-
- WildFire Dashboard: Filters
- WildFire Dashboard: Total Samples Submitted
- WildFire Dashboard: Analysis Insights
- WildFire Dashboard: Session Trends For Samples Submitted
- WildFire Dashboard: Verdict Distribution
- WildFire Dashboard: Top Applications Delivering Malicious Samples
- WildFire Dashboard: Top Users Impacted By Malicious Samples
- WildFire Dashboard: Top Malware Regions
- WildFire Dashboard: Top Firewalls
- Dashboard: DNS Security
- Dashboard: AI Runtime Security
- Dashboard: IoT Security
- Dashboard: Prisma Access
-
- Application Experience Dashboard: Mobile User Experience Card
- Application Experience Dashboard: Remote Site Experience Card
- Application Experience Dashboard: Experience Score Trends
- Application Experience Dashboard: Experience Score Across the Network
- Application Experience Dashboard: Global Distribution of Application Experience Scores
- Application Experience Dashboard: Experience Score for Top Monitored Sites
- Application Experience Dashboard: Experience Score for Top Monitored Apps
- Application Experience Dashboard: Application Performance Metrics
- Application Experience Dashboard: Network Performance Metrics
- Dashboard: Best Practices
- Dashboard: Compliance Summary
-
- Prisma SD-WAN Dashboard: Device to Controller Connectivity
- Prisma SD-WAN Dashboard: Applications
- Prisma SD-WAN Dashboard: Top Alerts by Priority
- Prisma SD-WAN Dashboard: Overall Link Quality
- Prisma SD-WAN Dashboard: Bandwidth Utilization
- Prisma SD-WAN Dashboard: Transaction Stats
- Prisma SD-WAN Dashboard: Predictive Analytics
- Dashboard: PAN-OS CVEs
- Dashboard: CDSS Adoption
- Dashboard: Feature Adoption
- Dashboard: On Demand BPA
- Manage: IoT Policy Recommendation
- Manage: Enterprise DLP
- Manage: SaaS Security
- Manage: Prisma Access Browser
- Reports: Strata Cloud Manager
-
-
- Strata Cloud Manager Release Information
-
- New Features in February 2025
- New Features in January 2025
- New Features in December 2024
- New Features in November 2024
- New Features in October 2024
- New Features in September 2024
- New Features in August 2024
- New Features in July 2024
- New Features in June 2024
- New Features in May 2024
- New Features in April 2024
- New Features in March 2024
- New Features in February 2024
- New Features in January 2024
- New Features in November 2023
- New Features in October 2023
- New Features in September 2023
- Known Issues
- Addressed Issues
- Getting Help
Manage: Config Cleanup
Identify and remove unused configuration objects and policy rules.
Where Can I Use This? | What Do I Need? |
---|---|
|
|
Use Config Cleanup to identify and remove unused configuration objects and policy
rules from your Strata Cloud Manager configuration. Removing unused configuration
objects eases firewall administration by removing clutter and preserving only the
configuration objects that are required for security enforcement.
Config Cleanup supports only deployments managed by Strata Cloud Manager,
including NGFW and Prisma Access configurations.
- Log in to Strata Cloud Manager.
- Select ManageSecurity PostureConfig Cleanup.
- Select the unused objects and policy rules across your entire Strata Cloud Manager configuration for the last 6 months.
- Policy Rules to Optimize—Click to review the policy rules that are overly permissive rules to convert these to be more specific, focused rules that only allow the applications you’re actually using.
- Unused Objects (Past 6 Months)—All configuration objects that went unused in any configuration or policy rule in the past 6 months.
- Zero Hit Objects (Past 6 Months)—Policy rules with configuration objects where the configuration object in the policy rule receives zero hits.Configuration objects listed here have received zero hits only in the policy rules that they’re associated with. Their usage might receive hits in the other policy rules they’re used in.
- Zero Hit Rules (Past 6 Months)—All policy rules that have had zero traffic matches in the past 6 months.
- Apply additional filters to target specific unused objects and policy rules.Add New Filter is supported for Unused Objects (Past 6 Months) and Zero Hit Policy Rules (Past 6 Months).
- Unused Objects (Past 6 Months)—You can filter and Delete unused objects based on:
- Name—Search for and select a specific configuration object name.
- Location—Configuration scope the configuration object name was created in.
- Object Type—Configuration object type.
- Days Unused—The number of days the configuration object went used.
- < 50—Less than 50 days unused.
- >= 50, <=100—Between 50 and 100 days unused.
- < 50—More than 100 days unused.
- Zero Hit Policy Rules (Past 6 Months)—You can filter and Enable, Disable, or Delete zero hit policy rules based on the Name, Days with Zero Hits, or any of the Source and Destination data.