topic Vulnerability Scanning in General Topics

Vulnerability Scanning

kpotru — Wed, 07 Mar 2018 20:22:24 GMT

My requestors wants to perform Vulnerability scanning on the Palo Alto firewall devices and they want to whitelist the Qualys devices residing on ON-Prem. So my question is do i need to create security rule or make modifications to vunerability or allow those scanners on the management interface?

They provided me the scanner IP's that they wan to whitelist.

Re: Vulnerability Scanning

reaper — Thu, 08 Mar 2018 08:20:58 GMT

hi @kpotru

in an existing security profile you can add exceptions to exclude an IP, but these are on a 'per signature' basis

if you want to exclude a device for all signatures, it is more practivcal to create a security rule specific to that device and add security profiles that have been set to alert, or without security profiles