I am almost ready to implement Zone protection in alert mode but I have 1 concern, the syn packets don't seem to really offer just an a alert only a random early drop.
My favorite feature is probably not a feature. I remember logging in the first time to the PA and was trying to figure out why something wasn't connecting and at the time my knowledge with PA was in its infancy. I logged on and saw the monitor tab and was able to put in my source and destination IP address and it showed me exactly why the connection was failing. I was able to apply a fix in minutes that would have taken me longer on our previous system using syslogs. It was the ah-ha moment for me at that time. Great technology!!
QOS is way under used.
I have seen it clear up all kinds of audio funk with all kinds of apps simply by using the default classes. This had an affect even without bandwidth contention. No DCSP, no TOS. Just create a couple rules for the touchy apps and set them to Class 1.
If you want to get fancy, combine it with our custom applications (i.e. NCAA) to cap bandwidth on custom apps. Schedule it so that every 15 minutes the bosses computer gets a trickle, just to mess with him/here. Allow bittorent at a slow rate as League of legends has that as a dependency, etc.
Alert, Activate and Maximum.
Set the Alert number where you want to alert.. and you will be alerted.
If the numbers reach the Activate level.. then it will activate. I would recommend that you set that to be the Highest level, along with the Maximum in order to meet your needs. Hope this helps and makes sense.
Thanks, everyone, for your comments and the lively discussion! We'll be sure to pass along your praise for the Palo Alto Networks Next Generation firewall to those who will smile the widest when hearing the news and reviews of this great engineering feat. Back with a wrap-up soon!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!