Exclude Criteria Filter to Monitor Firewall Device Configuration

Firewall Analyzer offers another value added feature to filter out device configuration changes from monitoring. While generating change report between any two configuration versions, there might be requirements to exclude certain specific lines or text of configuration. For example, lines containing Cryptochecksum information, speed token, NTP clock-period should be ignored when the difference is considered. While Firewall Analyzer itself takes care of excluding information like the ones above, you can specify exclude criteria based on specific needs. Once the criteria is specified, Firewall Analyzer will exclude the lines matching the specified criteria for all devices belonging to which the exclude criteria template is created and applied. To cutail this, Firewall Analyzer offers Exclude Criteria filter. This will exclude the configurations with the selected criteria to be filtered out from monitoring.

The procedures to manage and create the Exclude Criteria are given below.

• How to manage Exclude Criteria
• How to add Exclude Criteria

How to manage Exclude Criteria

• Select the Compliance tab. The Compliance page opens up.
• Click the Exclude Criteria link, on the top right side of the Compliance page and the Exclude Criteria List page opens up.
• In the Exclude Criteria List page, you will find Add Criteria and Delete Criteria links. Below the links, the Exclude Criteria Templates are listed.

The Template table contains the following columns.

Columns	Description
Template Name	Name of the Exclude Criteria template
Applied To	Name of the devices the exclude criteria template is applied
	Click to edit the Exclude Criteria template
	Click to disable the Exclude Criteria template
	Click to delete the Exclude Criteria template

How to add Exclude Criteria

• Select the Compliance tab. The Compliance page opens up.
• Click the Exclude Criteria link, on the top right side of the Compliance page and the Exclude Criteria List page opens up.
• In the Exclude Criteria List page, click Add Criteria link and the Add Exclude Criteria page opens up.
• In the Exclude Criteria section, enter values or select options.
• Enter a name for the exclude criteria template in the Template Name field.
• In the Criteria field, select the 'contains or starts with' condition from the drop down list and enter the value to filter in the text box besides. Click the icon to add more filter criteria. In the additional criteria field, there will be an additional logic operator to relate the additional filter criteria, select the 'and or or' condition from the drop down list. You can use regular expressions while specifying the Exclude Criteria. For example, if you wish to exclude the lines containing the text "logging" followed by an IP address, you may specify the criteria as logging.* Click the icon to delete additional filter criteria.
• In the Apply To field, select the device(s) to which the configuration exclusion criteria to be applied. Select the check box of Select All option. The total number of devices selected will appear besides this field. You can also select individual devices by selecting the respective check boxes.
• You can optionally, notify the exclusion criteria to the Firewall Analyzer product team. Select the Email this information to Firewall Analyzer Team. (Optional) check box and enter your email ID in the Contact Email (Optional) text box. This email ID will help Firewall Analyzer product team to contact you later, if needed.
• Click Apply button to add the new template or click Cancel button to cancel this operation.