article Nominated Discussion: Why You Need Security Profiles in General Articles

article Nominated Discussion: Why You Need Security Profiles in General Articles https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-why-you-need-security-profiles/ta-p/534708 <P>This Nominated Discussion Article is based on the post "<A href="https://live.paloaltonetworks.com/t5/general-topics/secuity-profile-question/m-p/534224" target="_blank" rel="noopener">Security Profile Question</A>" by <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/237987">@WingMak</a> and responded to by <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/43480">@BPry</a> and <a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/27580">@OtakarKlier</a>. Read on to see the discussion and solution!</P> <P> </P> <DIV class="lia-message-template-content-zone"> <BLOCKQUOTE> <P>I would like to test a virus file through the PA firewall.</P> <P> </P> <P>The firewall does not have a security profile configured.</P> <P>Will the virus be detected by the PA ? Will it show in the threat log ?</P> </BLOCKQUOTE> <P>If you want to verify that a malicious file is going to be caught by the firewall then you will need either a <STRONG>threat prevention license</STRONG> or a <STRONG>WildFire license</STRONG> installed on your firewall.</P> <P> </P> <P>Check out the different <STRONG><A href="https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/subscriptions/all-subscriptions" target="_blank" rel="noopener">Subscriptions You Can Use With the Firewall</A>. </STRONG></P> <P> </P> <P>That being said, if you do not have a security profile attached to your security policies, then no, the firewall will <STRONG>not</STRONG> be scanning for those threats and it will <STRONG>not</STRONG> show up in the threat log.</P> <P> </P> <P>When traffic matches the allow rule defined in the security policy, the security profile(s) that are attached to the rule are applied for further content inspection rules such as antivirus checks and data filtering. No security profile = no further content inspection.</P> <P> </P> <P>The firewalls are equipped with out-of-the-box security profiles that you can use to protect yourself from threats. If you have a good understanding about the security needs on your network, see <A class="xref" title="" href="https://docs.paloaltonetworks.com/best-practices/10-2/internet-gateway-best-practices/best-practice-internet-gateway-security-policy/create-best-practice-security-profiles" target="_blank" rel="noopener" data-scope="external" data-format="dita" data-type=""><STRONG>Create Best Practice Security Profiles for the Internet Gateway</STRONG></A> to learn how you can create custom profiles.</P> <P> </P> <DIV class="note fastpath" data-label="FASTPATH"> <DIV style="display: inline;"> <DIV class="p"> <DIV style="display: inline;">For recommendations on the best-practice settings for security profiles, see <A class="xref" title="" href="https://docs.paloaltonetworks.com/best-practices/10-2/internet-gateway-best-practices/best-practice-internet-gateway-security-policy/create-best-practice-security-profiles" target="_blank" rel="noopener" data-scope="external" data-format="dita" data-type=""><STRONG>Create Best Practice Security Profiles for the Internet Gateway</STRONG></A>.</DIV> <DIV style="display: inline;"> </DIV> <BR /> <DIV style="display: inline;"><STRONG>Additional information:</STRONG></DIV> <UL> <LI><STRONG><A href="https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/policy/security-profiles" target="_blank" rel="noopener">Security Profiles</A> </STRONG></LI> <LI><STRONG><A href="https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/policy/security-profiles/create-a-security-profile-group" target="_blank" rel="noopener">Create a Security Profile Group</A> </STRONG></LI> <LI><STRONG><A href="https://docs.paloaltonetworks.com/pan-os/11-0/pan-os-admin/policy/security-profiles/set-up-or-override-a-default-security-profile-group" target="_blank" rel="noopener">Set Up or Override a Default Security Profile Group</A> </STRONG></LI> </UL> </DIV> </DIV> </DIV> </DIV> Thu, 16 Mar 2023 18:00:03 GMT kiwi 2023-03-16T18:00:03Z Nominated Discussion: Why You Need Security Profiles https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-why-you-need-security-profiles/ta-p/534708 <P>This Nominated Discussion Article is based on the post "Security Profile Question". Read on to see the discussion and solution!</P> Thu, 16 Mar 2023 18:00:03 GMT https://live.paloaltonetworks.com/t5/general-articles/nominated-discussion-why-you-need-security-profiles/ta-p/534708 kiwi 2023-03-16T18:00:03Z