topic Re: Palo alto WAF risk assessment in Next-Generation Firewall Discussions

Palo alto WAF risk assessment

gajji229 — Thu, 13 Jun 2024 17:34:07 GMT

I got request to do PA WAF risk assessment for my environment, do you have any suggestions how should i do Any documents/steps/url that i can follow to do the same.

Re: Palo alto WAF risk assessment

JayGolf — Fri, 14 Jun 2024 16:16:44 GMT

Hi @gajji229 ,

Hope you're doing well!

If you have a public-facing web application that handles sensitive data, it's a good idea to include a dedicated Web Application Firewall (WAF) in your architecture alongside your Next-Generation Firewall (NGFW). You might want to check out Prisma Cloud's Web-Application and API Security (WAAS) offering—it could be a great fit for your organization's needs.

When doing your assessment, consider the differences between NGFW and WAFs. It's important to determine whether it's acceptable for your organization to operate without a dedicated WAF. Keep in mind that assessing just the NGFW might not cover all the crucial areas a WAF is designed to protect.

Re: Palo alto WAF risk assessment

PavelK — Mon, 17 Jun 2024 01:06:01 GMT

Hello @gajji229

to only add what Jay mentioned it is crucial to enabled inbound ssl decryption to allow Firewall have a full visibility into incoming traffic.

Kind Regards

Pavel