Both Panorama and Strata Cloud Manager (SCM) offer the Policy Optimizer feature, which assists administrators in refining and enhancing security policies. Policy Optimizer identifies overly permissive or unused security rules and provides recommendations to convert them into more specific, application-based rules, thereby strengthening the organization's security posture.

In Panorama, Policy Optimizer analyzes traffic logs to detect security rules that are too broad or unused. It then suggests modifications to these rules, enabling administrators to implement more precise policies that align with actual network traffic patterns.

Similarly, Strata Cloud Manager incorporates Policy Optimizer to help organizations clean up and streamline their security policies. It offers insights into rule usage and provides actionable recommendations to replace broad rules with more specific ones, ensuring that security policies are both effective and efficient.

References:

docs.paloaltonetworks.com