Firewall rules suggestion

CARRIERJerome — Fri, 21 Jun 2019 07:31:15 GMT

Hello

I would like to have advices regarding firewall rules. I'm deploying a PA-3220 on my main site (site A). On this main site, I have several zones configured on my PA3220 (user, servers, dmz Intranet,). I have also 5 remote sites.

I must create a rule to allow small sites and users & servers zone configured on my main site (site A) to reach our DMZ Intranet zone . What is the best approch to create a rule ? Is-it to create a first rule (wich rule name ?) to allow remote site to Intranet zone on site A and a second rule to allow the the local zone (user, server) to reach Intranet ?

Is-it to create a single rule with, in source zone, the WAN zone (remote site) and local zone (user, servers) and destination my DMZ network in the Intranet zone ? And is-it a problem if in source zone, I have a mix of WAN access (for traffic coming from my remote site) and local site (user, servers) for traffic coming from these local zones ?

Re: Firewall rules suggestion

ram1482800 — Fri, 21 Jun 2019 10:08:44 GMT

I Have website where i want apply all firewall rules and DMZ rules i also dont which firewall rules apply on website

Re: Firewall rules suggestion

OtakarKlier — Mon, 24 Jun 2019 15:27:52 GMT

Hello,

If your remote sites have the same zone name, ie remote office, then you could just create a policy to allow remoteoffice zone to connect to dmz zone.

Or something like that.

Regards,

topic Firewall rules suggestion in General Topics

Firewall rules suggestion

Re: Firewall rules suggestion

Re: Firewall rules suggestion