topic Log forwarding "Zone Protection" ? in General Topics

Log forwarding "Zone Protection" ?

RobinClayton — Fri, 03 Nov 2017 09:15:08 GMT

I can't find an up to date way to enable log forwarding for "Zone Protection" profiles.

I found a guide for 6.1 but its not relevent for 8.0

I want alerts when we get port scanned.

Cheers

Rob

kiwi — Fri, 03 Nov 2017 11:04:59 GMT

It's true that with PAN-OS 8.0 the log forwarding feature was enhanced somewhat.

That said the process to set it up is still very similar to 6.1.

Here you will find the 8.0 guide :

Hope this helps,

Cheers !

-Kiwi.

RobinClayton — Fri, 03 Nov 2017 12:54:27 GMT

The guide seems incomplete

Step 3 says "Network Zones"

But there is no information regarding setting up logforward on zones and there is nothing obvious in the configuration.

RobinClayton — Fri, 03 Nov 2017 12:56:38 GMT

Found it now.

In the zone just under "Name"

Netwrok > Zone > "Zone"