topic Re: Reverse Path Forwarding (RPF) in General Topics https://live.paloaltonetworks.com/t5/general-topics/reverse-path-forwarding-rpf/m-p/37653#M27589 <HTML><HEAD></HEAD><BODY><P><A href="http://en.wikipedia.org/wiki/Reverse_path_forwarding" title="http://en.wikipedia.org/wiki/Reverse_path_forwarding">Reverse path forwarding - Wikipedia, the free encyclopedia</A></P><P></P><P>It's there... it's just not called uRPF.&nbsp; This is handled by the "Spoofed IP address" protection functionality provided in the Zone Protection feature.&nbsp; In the PAN-OS GUI, go to Network / Network Profiles / Zone Protection Profiles.&nbsp; From here you can create/modify a Zone Protection Profile.&nbsp; Go to the Packet-based protections tab and enable protections for "Spoofed IP address"</P><P></P><P><IMG alt="urpf.png" class="image-0 jive-image" height="366" src="https://live.paloaltonetworks.com/legacyfs/online/18376_urpf.png" style="height: 366px; width: 518.5px;" width="519" /></P><P></P><P>You then apply the Zone Protection Profile on a Zone by going to the Network tab / Zones / and selecting the Zone Protection Profile.&nbsp; </P><P></P><P><IMG alt="urpf2.png" class="image-1 jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/18410_urpf2.png" style="height: 451px; width: 620px;" /></P></BODY></HTML> Mon, 23 Feb 2015 17:55:01 GMT jvalentine 2015-02-23T17:55:01Z Reverse Path Forwarding (RPF) https://live.paloaltonetworks.com/t5/general-topics/reverse-path-forwarding-rpf/m-p/37652#M27588 <HTML><HEAD></HEAD><BODY><P>It appears to me after diligently searching that Palo Alto firewalls do not support Unicast Reverse Path Forwarding (RPF/uRPF) in any form.&nbsp; Is this correct?&nbsp; If not, how does one implement reverse path forwading on a Palo Alto Firewall?</P></BODY></HTML> Mon, 23 Feb 2015 15:02:11 GMT https://live.paloaltonetworks.com/t5/general-topics/reverse-path-forwarding-rpf/m-p/37652#M27588 KKUNZLER 2015-02-23T15:02:11Z Re: Reverse Path Forwarding (RPF) https://live.paloaltonetworks.com/t5/general-topics/reverse-path-forwarding-rpf/m-p/37653#M27589 <HTML><HEAD></HEAD><BODY><P><A href="http://en.wikipedia.org/wiki/Reverse_path_forwarding" title="http://en.wikipedia.org/wiki/Reverse_path_forwarding">Reverse path forwarding - Wikipedia, the free encyclopedia</A></P><P></P><P>It's there... it's just not called uRPF.&nbsp; This is handled by the "Spoofed IP address" protection functionality provided in the Zone Protection feature.&nbsp; In the PAN-OS GUI, go to Network / Network Profiles / Zone Protection Profiles.&nbsp; From here you can create/modify a Zone Protection Profile.&nbsp; Go to the Packet-based protections tab and enable protections for "Spoofed IP address"</P><P></P><P><IMG alt="urpf.png" class="image-0 jive-image" height="366" src="https://live.paloaltonetworks.com/legacyfs/online/18376_urpf.png" style="height: 366px; width: 518.5px;" width="519" /></P><P></P><P>You then apply the Zone Protection Profile on a Zone by going to the Network tab / Zones / and selecting the Zone Protection Profile.&nbsp; </P><P></P><P><IMG alt="urpf2.png" class="image-1 jive-image" src="https://live.paloaltonetworks.com/legacyfs/online/18410_urpf2.png" style="height: 451px; width: 620px;" /></P></BODY></HTML> Mon, 23 Feb 2015 17:55:01 GMT https://live.paloaltonetworks.com/t5/general-topics/reverse-path-forwarding-rpf/m-p/37653#M27589 jvalentine 2015-02-23T17:55:01Z