how to block access to firewall

[paloaltouemf]

Hi .

How to block access to firewall ?

i have PA on public IP adress, but i want allow access only for 1-3 ip address.

i need to add this addres in DEVICE--> MANAGEMENT -->MANAGEMENT INTERFACE SETTINGS in Permitted IP Adrress

or

create a policy ??

[_slv_]

Hi

Management interface is to connect your workstation to PAN device directly.

If you are thinking about management from Untrust (internet) zone I recomendate to use GlobalProtect for it. It is my reliable and powerfull for configure. GP is free for every one who has support for their device.

I hope that this will help You

With regards

SLawek

[_slv_]

I found easiest way to achieve that.

Create on you device profile ping_https and in Permited IP addresses put what You want and attach this profile to you interface like on:

Regards

Slawek

[mbutt]

HI,

As Slawek suggested you can just allow certain IP address in the permitted list for the management interface. But keep in mind this will only allow the access through those IP address.

Similarly you can do the same for the dataplane port as well.

Hope this helps.
Regards,
Numan