01-09-2017 08:37 PM
Hi
I have made security policy on Paloalto as per port base requirment.
eg.
I have allowed http, https, dns as a service. But i also want ping to be allowed in the same policy.
Please advice how can achive this.
Samir.
01-09-2017 11:16 PM
You can't in same rule. Make duplicate rule with ping (and icmp if needed) as application.
If you put ping in same rule it would be triggering only on ping on ports TCP 80, 443 and UDP 53 which will of course never happen as ICMP is seperate (port-less) protocol.
01-10-2017 07:21 AM
As already stated this wouldn't be something that you do in the same rule. One thing that I might actually question is why you included DNS in the same rule that you allowed HTTP/HTTPS? DNS is likely something that you won't care to have logged, while you probably want to log HTTP/HTTPS traffic, so if you seperate the rule out so that you have one rule for 'web-browsing' one rule for 'DNS' and one rule for 'Ping' it gets alot easier to work with any special requests that come through and all the rules get to be clearly labled with what they do. You also get the added benefit of not having to log DNS/Ping but you cand still have logging enabled for HTTP/HTTPS traffic.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
