topic Re: Consistent Profile Assignment in General Topics

Consistent Profile Assignment

RonaldRichter — Thu, 07 Mar 2019 17:16:16 GMT

Does PA advocate the assignment of Security Policy Profiles (with at least alert actions) to all rules. Is it a best practice?

Re: Consistent Profile Assignment

reaper — Fri, 15 Mar 2019 12:50:19 GMT

yes

a profile cannot be 'over' used as elements that are not applicable to a policy will not be triggered (eg a 'dns' policy will not unnecessarily trigger http scanning)

it is recommended to have security policies on all rules

Re: Consistent Profile Assignment

RonaldRichter — Fri, 15 Mar 2019 13:30:52 GMT

Thanks for the reply.