Ping to allow on Security Policy

Reply
Highlighted
L0 Member

Ping to allow on Security Policy

Hi

 

I have made security policy on Paloalto as per port base requirment.

 

eg.

I have allowed http,  https, dns as a service. But i also want ping to be allowed in the same policy.

 

Please advice how can achive this.

 

Samir.  

L0 Member

Re: Ping to allow on Security Policy

You can't in same rule. Make duplicate rule with ping (and icmp if needed) as application.

 

If you put ping in same rule it would be triggering only on ping on ports TCP 80, 443 and UDP 53 which will of course never happen as ICMP is seperate (port-less) protocol.

L7 Applicator

Re: Ping to allow on Security Policy

As already stated this wouldn't be something that you do in the same rule. One thing that I might actually question is why you included DNS in the same rule that you allowed HTTP/HTTPS? DNS is likely something that you won't care to have logged, while you probably want to log HTTP/HTTPS traffic, so if you seperate the rule out so that you have one rule for 'web-browsing' one rule for 'DNS' and one rule for 'Ping' it gets alot easier to work with any special requests that come through and all the rules get to be clearly labled with what they do. You also get the added benefit of not having to log DNS/Ping but you cand still have logging enabled for HTTP/HTTPS traffic. 

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!