topic Re: How do I white list an external IP address? in General Topics

How do I white list an external IP address?

robert.millott — Mon, 23 Oct 2017 13:58:31 GMT

I have a known external Nessus scanner that scans my external network every weekend. Every Monday morning, I've got hundreds of alerts due to these scans. I do not want to disable the scan alerting in general because if anyone else scans me, I want to know, but how can I whitelist these few specific IP addresses so I won't get all these alerts? Anyone figured out how to do this?

I am running a pair of PA-3050s with PanOS8.0.4

Thank you for the help

Re: How do I white list an external IP address?

gwesson — Mon, 23 Oct 2017 17:21:51 GMT

You could create a security policy above others that would scan for threats. Add the IP addresses (you'll probably want to create an address group) and set the action to Allow. As long as it has no security profiles, you shouldn't see anything trigger from those IPs.

Re: How do I white list an external IP address?

robert.millott — Tue, 31 Oct 2017 11:17:11 GMT

Perfect. Thank you for your help