Our new security manager wanted a list of all rules that use the keyword "Any" in them. As there are 500+ rules, I could simply go through them but I found an easier way.
In Smartdashboard the query syntax "includeany" can be used to find the keyword "Any", but it needs to be used with a source or destination search. For example:
src:192.168.1.1 includeany
dst:192.168.1.1 includeany
If you only want "Any" rules; you have to make sure you search with an IP address that you know does not exist. That just seems wrong!
To get around this, I created a new node called "null" with IP address 0.0.0.0 and now I can do the following searches to get exactly what I need:
src:null includeany
dst:null includeany
src:null includeany or dst:null includeany
Hope its helpful to someone else.
Si...
