A Fall/Autumn Question: What is your favorite Palo Alto Networks feature?

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
L4 Transporter

@BPry

 

I am almost ready to implement Zone protection in alert mode but I have 1 concern, the syn packets don't seem to really offer just an a alert only a random early drop.randomearly.PNG

Highlighted
L2 Linker

My favorite feature is probably not a feature.  I remember logging in the first time to the PA and was trying to figure out why something wasn't connecting and at the time my knowledge with PA was in its infancy.  I logged on and saw the monitor tab and was able to put in my source and destination IP address and it showed me exactly why the connection was failing.  I was able to apply a fix in minutes that would have taken me longer on our previous system using syslogs.  It was the ah-ha moment for me at that time.  Great technology!!

 

Todd

Highlighted
L1 Bithead

QOS is way under used. 

 

I have seen it clear up all kinds of audio funk with all kinds of apps simply by using the default classes.  This had an affect even without bandwidth contention.  No DCSP, no TOS.  Just create a couple rules for the touchy apps and set them to Class 1.

 

If you want to get fancy, combine it with our custom applications (i.e. NCAA) to cap bandwidth on custom apps.  Schedule it so that every 15 minutes the bosses computer gets a trickle, just to mess with him/here.  Allow bittorent at a slow rate as League of legends has that as a dependency, etc.

 

Bob

 

 

Highlighted
Community Team Member

@jdprovine@BPry, There is an "alert".. just look at what it shows. There are 3 fields.. 

Alert, Activate and Maximum. 

 

Set the Alert number where you want to alert.. and you will be alerted. 

If the numbers reach the Activate level.. then it will activate. I would recommend that you set that to be the Highest level, along with the Maximum in order to meet your needs.  Hope this helps and makes sense.

Stay Secure,
Joe
End of line
Highlighted
L4 Transporter

@jdelio

 

another area of zone protection looks like the only setting is a drop of traffc,drop.PNG no alert, granted most of this traffic looks like it should be dropped

 

 

Highlighted
Community Team Member

Thanks, everyone, for your comments and the lively discussion! We'll be sure to pass along your praise for the Palo Alto Networks Next Generation firewall to those who will smile the widest when hearing the news and reviews of this great engineering feat. Back with a wrap-up soon!

Stay Secure,
Joe
End of line
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!