topic Re: PaloALto automatique update for threat prevention in General Topics

PaloALto automatique update for threat prevention

hamza-zidane — Mon, 12 Feb 2018 10:53:24 GMT

Hello

I need some help in an automatic update for the Threat Prevention.

let me explain to you our design.

We have the headquarter, and the branches, in one of this branches there is PaloAlto firewall, and this PaloAlto is not connected to the internet directly, there is a proxy internet in headquarter, then how I can configure my PaloAlto to see internet and get the vulnerablity update via this proxy installed in the headquarter ??

Thanks

Re: PaloALto automatique update for threat prevention

reaper — Mon, 12 Feb 2018 12:21:03 GMT

you can configure a proxy server on the management services and have all outbound update connections rerouted to your proxy server :

Re: PaloALto automatique update for threat prevention

hamza-zidane — Mon, 12 Feb 2018 14:04:41 GMT

Thank you very much brother, tell me plz and for DNS server i let the google @IP 8.8.8.8 & 4.2.2.2 or I'll change it to proxy address also ??

Re: PaloALto automatique update for threat prevention

reaper — Mon, 12 Feb 2018 14:23:11 GMT

The proxy setting does all you need: once you fill out the proxy config, all outbound connections will be forwarded to the proxy, so unless you proxy also doubles as a DNS proxy (requires you to set is as a client dns rather than passthrough), simply leave your DNS settings as you have them now and they will be forwarded

Re: PaloALto automatique update for threat prevention

hamza-zidane — Thu, 15 Feb 2018 15:45:34 GMT

Thanks you very much brother