topic Security profile testing in Advanced Threat Prevention Discussions

Security profile testing

Jamesy — Fri, 26 Jun 2020 16:37:34 GMT

I am currently building out more granular policies that have application groups applied as well as security profiles for AV, malware, vulnerability and URL filtering. I will be applying these to a test firewall and would like to build out a test plan to ensure they are working as expected.

I just wanted to run this by the community to see if perhaps there were any recommendations on testing the AV, malware and vulnerability side of things?

Re: Security profile testing

hisingh — Fri, 26 Jun 2020 16:56:45 GMT

Hello @Jamesy

I would suggest going through the best practices, you can find the documents here: https://docs.paloaltonetworks.com/best-practices/9-0/internet-gateway-best-practices/best-practice-internet-gateway-security-policy/transition-safely-to-best-practice-security-profiles.html

Best

Himani

Re: Security profile testing

Jamesy — Fri, 26 Jun 2020 17:03:06 GMT

Hi Himani,

I have gone through the best practice docs and used these to build the profiles and policies. I would like to be able to test these before applying them in production. I want to have a checklist to ensure that they profiles don't a) cause any blockages to traffic and b) are blocking malicious/ unsanctioned traffic as intended.

Thanks,

Jamesy