packet based attack

[PanIst]

Hi,

Will Choosing all options cause a false positive ?(especially IP option boxes)

And how can we see these drops ?

Unable to See the Threat Logs for Packet Based Attack

Thanks

[MSharma]

Hello Panlst,

Enabling all options may drop legitimate traffic too.

To check drop packets , you can run following command :

> show zone-protection zone untrust

This output will show all the options that have been enabled and the number of packets dropped by it.

For best practices, please check following document too :

https://live.paloaltonetworks.com/servlet/JiveServlet/previewBody/5078-102-5-14892/Understanding_DoS...

Threat Prevention Deployment Tech Note

Please let us know if was helpful.

Thanks