topic Re: sensitive information in PA 3200 in General Topics

sensitive information in PA 3200

DGonzalezAR — Fri, 28 Feb 2020 17:14:38 GMT

I have a firewall PA 3220 to send by RMA to Palo ALto , but first, the client wants to make sure that he has no sensitive information inside, can someone tell me if this is the case or what should be done for the return of the equipment without exposing sensitive customer information?

Re: sensitive information in PA 3200

Retired Member — Fri, 28 Feb 2020 18:02:14 GMT

If the client is the US Government, they can retain the disk drives and destroy them. For everyone else, the only way to remove sensitive information is to try and factory reset the firewall. Check out the RMA policy here: https://www.paloaltonetworks.com/content/dam/pan/en_US/assets/pdf/datasheets/support/rma-process-policy.pdf

Re: sensitive information in PA 3200

BPry — Sun, 01 Mar 2020 05:01:12 GMT

@DGonzalezAR,

If the device can still boot into maintenance mode then simply reset it to factory default; keep in mind that if you decide to scrub the data this process can take days to actually complete depending on hardware.

If you can't get into maintenance mode, and you aren't a government entity, you can simply pull the drive and manually wipe it just FYI. Since your log drive is in a simple removable carriage there isn't anything stopping you from hooking this into another computer and clearing it.

Re: sensitive information in PA 3200

Retired Member — Sun, 01 Mar 2020 14:11:45 GMT

By the way, Palo Alto Networks sanitizes the drives on RMA hardware as well.