zone protection profile

Idris48 — Thu, 02 Sep 2021 20:51:12 GMT

Can a zone protection profile be implemented on outside zone without an outage ?

Re: zone protection profile

bafergel — Fri, 03 Sep 2021 18:57:25 GMT

I mean, what part of zone protection are you implementing? You could implement the flood and reconnaissance protection and just have it alert so no action is actually taken. Then monitor to adjust the setting accordingly. Most settings in a zone protection profile will be specific to your organization's needs and just like every feature being implemented you should always test beforehand.

Here is Palos best practice document on settings up a zone protection profile: https://docs.paloaltonetworks.com/best-practices/9-1/dos-and-zone-protection-best-practices/dos-and-zone-protection-best-practices/deploy-dos-and-zone-protection-using-best-practices.html

Re: zone protection profile

OtakarKlier — Fri, 03 Sep 2021 20:57:33 GMT

Hello,

Yes it can. I always recommend you enable it with the defaults first. Wait and monitor the traffic to see if any is getting dropped.

topic zone protection profile in General Topics

zone protection profile

Re: zone protection profile

Re: zone protection profile