topic Re: how to block access to firewall in General Topics

how to block access to firewall

paloaltouemf — Thu, 28 Nov 2013 21:09:30 GMT

Hi .

How to block access to firewall ?

i have PA on public IP adress, but i want allow access only for 1-3 ip address.

i need to add this addres in DEVICE--> MANAGEMENT -->MANAGEMENT INTERFACE SETTINGS in Permitted IP Adrress

create a policy ??

Re: how to block access to firewall

_slv_ — Fri, 29 Nov 2013 16:06:47 GMT

Management interface is to connect your workstation to PAN device directly.

If you are thinking about management from Untrust (internet) zone I recomendate to use GlobalProtect for it. It is my reliable and powerfull for configure. GP is free for every one who has support for their device.

I hope that this will help You

With regards

SLawek

Re: how to block access to firewall

_slv_ — Fri, 29 Nov 2013 16:12:49 GMT

I found easiest way to achieve that.

Create on you device profile ping_https and in Permited IP addresses put what You want and attach this profile to you interface like on:

Regards

Slawek

Re: how to block access to firewall

mbutt — Mon, 02 Dec 2013 18:26:14 GMT

HI,

As Slawek suggested you can just allow certain IP address in the permitted list for the management interface. But keep in mind this will only allow the access through those IP address.

Similarly you can do the same for the dataplane port as well.

Hope this helps.
Regards,
Numan