Understand Policy Change Impact Analyzer results

The Analysis Result summarizes the combined effect of the pending access control policy changes for advice. The result is displayed in the Cloud-Delivered Firewall Management Center Advanced Deploy page after the analysis.

Note	Assessment state and Analysis Result are different. The state indicates whether processing is queued, in progress, completed, or unsuccessful. Analysis Result describes the impact determined for the pending policy changes.


Analysis Result	Description	Recommended Action
Critical	One or more changes may expose the network to threats or disrupt services.	Review the affected rules and traffic segments before deployment. If the change is unintended, revise the policy and rerun Advanced Assessment.
Potential Impact	One or more changes expand access or may affect traffic.	Validate the affected traffic and expected business outcome before deployment.
Improved Security Posture	One or more changes reduce exposure or block risky traffic.	Confirm that the affected traffic is intentionally restricted, and then continue through the normal change-review process.
No Traffic Impact	No behavior-changing traffic transition was identified by comparing the deployed and proposed policies.	Confirm that the proposed rule is needed and positioned as intended. This result is different from a change that has zero observed connections.
Indeterminate	The available evidence was insufficient to determine a reliable impact.	Review the changed rule and traffic criteria manually. Gather additional operational context and rerun the assessment when appropriate.