Single pane policy & day one configuration

A network device comprising:

• one or more memories having computer-readable instructions stored therein;
• and
• one or more processors configured to execute the computer-readable instructions to:
• receive configuration information from one or more network services in a network, the configuration information including configuration descriptions of rules configured on respective services;
• analyze the configuration information for the one or more network services to identify the rules on the respective services that have similar intents;
• present the identified rules on the respective services that have similar intents together in a group in a user interface;
• receive an input to expand the group of the identified rules, wherein respective rules of the identified rules are presented in a normalized manner to facilitate easy comparison;
• in response to identifying a similar rule to the identified rules, present the similar rule proximate to the group of the identified rules with a suggestion to modify the similar rule to correspond to the identified rules;
• determine a configuration update for one of the plurality of network services on which the similar rule is configured to apply a change to the similar rule that will make the similar rule correspond to the identified rules;
• and
• transmit the configuration update to each of the plurality of network services in a network.

A non-transitory computer-readable storage medium comprising computer-readable instructions, which when executed by one or more processors of a network appliance, cause the network appliance to:

• receive configuration information from one or more network services in a network, the configuration information including configuration descriptions of rules configured on respective services;
• analyze the configuration information for the one or more network services to identify the rules on the respective services that have similar intents;
• present the identified rules on the respective services that have similar intents together in a group in a user interface;
• receive an input to expand the group of the identified rules, wherein respective rules of the identified rules are presented in a normalized manner to facilitate easy comparison;
• in response to identifying a similar rule to the identified rules, present the similar rule proximate to the group of the identified rules with a suggestion to modify the similar rule to correspond to the identified rules;
• determine a configuration update for one of the plurality of network services on which the similar rule is configured to apply a change to the similar rule that will make the similar rule correspond to the identified rules;
• and
• transmit the configuration update to each of the plurality of network services in a network.