https://live.paloaltonetworks.com/t5/general-topics/masscan-detection/m-p/527003#M108906 <P>Anyone knows how Palo detect Masscan?&nbsp;</P> Fri, 13 Jan 2023 20:17:18 GMT luke_luma 2023-01-13T20:17:18Z https://live.paloaltonetworks.com/t5/general-topics/masscan-detection/m-p/527003#M108906 <P>Anyone knows how Palo detect Masscan?&nbsp;</P> Fri, 13 Jan 2023 20:17:18 GMT https://live.paloaltonetworks.com/t5/general-topics/masscan-detection/m-p/527003#M108906 luke_luma 2023-01-13T20:17:18Z https://live.paloaltonetworks.com/t5/general-topics/masscan-detection/m-p/527010#M108908 <P>Hello&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/267586">@luke_luma</a>&nbsp;</P> <P>&nbsp;</P> <P>Yes, PA can detect host sweep and port scans, in your Zone, you need to attach a Zone Protection Profile and in the section&nbsp;Reconnaissance Protection tab you can configure it. Watchout with the other option in the Zone protection profile. Check the next link to guide in the process.</P> <P>&nbsp;</P> <P><A href="https://docs.paloaltonetworks.com/best-practices/dos-and-zone-protection-best-practices" target="_blank">https://docs.paloaltonetworks.com/best-practices/dos-and-zone-protection-best-practices</A></P> <P>&nbsp;</P> <P><A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClZhCAK" target="_blank">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClZhCAK</A></P> <P>&nbsp;</P> <P>Cheers</P> Fri, 13 Jan 2023 20:55:53 GMT https://live.paloaltonetworks.com/t5/general-topics/masscan-detection/m-p/527010#M108908 Metgatz 2023-01-13T20:55:53Z