topic Re: Best Security Firewall review in General Topics

Best Security Firewall review

AdamCoombs — Thu, 20 Oct 2016 15:29:41 GMT

Ok, I heard that palo alto does have a service that will review a firewall configs to make sure the Best Practices and Security Practices are being down. If this is true what is the service call and has anyone use this service ?

Re: Best Security Firewall review

BPry — Thu, 20 Oct 2016 16:59:01 GMT

I don't know if Palo actually offers this directly (they might) but usually this is something that most vendors would pass off to one of their VARs/Resellers and they would perform the audit. We had one done earlier this year with a company that actually does all of the order prcoessing for our Palo equipment and licenses.

Re: Best Security Firewall review

Brandon_Wertz — Thu, 20 Oct 2016 19:15:08 GMT

Doesn't get more "official" than SANS:

https://www.sans.org/reading-room/whitepapers/auditing/palo-alto-firewall-security-configuration-benchmark-35777

That being said best practice isn't always "best for your enviornment"

Re: Best Security Firewall review

AdamCoombs — Thu, 20 Oct 2016 20:43:17 GMT

Can you describe what they did like, did have check list that goes with palo alto best security practices.

DNS Sink check

Deny ACL placement check

Zone recommendations

Profile not best practices

Did they verify all the best security practices are in place and correct working

Re: Best Security Firewall review

AdamCoombs — Thu, 20 Oct 2016 21:17:07 GMT

I agree best practices are not always best for enivorment.

Just make sure when someone reviews the configs of the firewall they are making sure things work too.

Thanks for the url link I will review it as well, nothing wrong with more information

Re: Best Security Firewall review

pulukas — Sat, 22 Oct 2016 13:54:22 GMT

If you are a large account, talk to your sales engineer about the Palo Alto professional services team. They provide contract services such as the best practice review you are talking about.

If you purchase through a partner, they can provide these professional services to you as well. Or check the partner list on the website for a provider in your area.

https://www.paloaltonetworks.com/services/cpsp-partners

Re: Best Security Firewall review

AdamCoombs — Mon, 07 Nov 2016 22:12:10 GMT

I found this today

Is this something a company would use

https://benchmarks.cisecurity.org/downloads/show-single/index.cfm?file=palofirewall.100