topic Re: Zone Protection on GlobalProtect Zone in General Topics

Zone Protection on GlobalProtect Zone

umar00o — Thu, 12 Mar 2020 11:22:16 GMT

Dear Team,

I have a question do you recommend putting Zone protection on the Zone which I have for GP. I am using loopback External IP for the connection and in the GP Zone I have added the tunnel interface.

Just want to understand if best practice to put zone protection on this zone?

Thanks

Re: Zone Protection on GlobalProtect Zone

batd2 — Fri, 13 Mar 2020 10:22:23 GMT

@umar00o The general Palo Alto best practices recommendation is to apply zone protection to all zones, however realistically there is no much use for ZP on it.This is just a virtual interface used only for the GP tunnel binding and there will not be much of benefit in using zone protection.

Re: Zone Protection on GlobalProtect Zone

umar00o — Fri, 13 Mar 2020 10:24:15 GMT

Hi Batd2,

Thank you very much for the clarificatoins.

Thanks