PaloAltoNetworks/pan-os-php

type=rule-compare - SRC/DST resolveaddresssummary not working correctly if add-group from top contains an overwritten address obj from local DG

swaschkut opened this issue · 1 comments

Describe the bug

pan-os-php framework is not calculating the rule SRC/DST resolveadresssummary correctly, if e.g.

  • secureRule on childDG contains address-group from shared called group1
  • this address-group group1 available on shared contains address object test1 with value 1.2.3.4
  • childDG has address object test1 overwritten with value 4.3.2.1

secRule SRC/DST IP resolution calculation is showing 1.2.3.4 instead of 4.3.2.1

Expected behavior

secRule SRC/DST IP resolution calculation must show 4.3.2.1

Current behavior

secRule SRC/DST IP resolution calculation ist showing 1.2.3.4

Possible solution

Steps to reproduce

Screenshots

Context

Your Environment

  • Version used:
  • Environment name and version (e.g. Chrome 59, node.js 5.4, python 3.7.3):
  • Operating System and version (desktop or mobile):
  • Link to your project:

#760 fixed