03-07-2018 12:22 PM
My requestors wants to perform Vulnerability scanning on the Palo Alto firewall devices and they want to whitelist the Qualys devices residing on ON-Prem. So my question is do i need to create security rule or make modifications to vunerability or allow those scanners on the management interface?
They provided me the scanner IP's that they wan to whitelist.
03-08-2018 12:20 AM
hi @kpotru
in an existing security profile you can add exceptions to exclude an IP, but these are on a 'per signature' basis
if you want to exclude a device for all signatures, it is more practivcal to create a security rule specific to that device and add security profiles that have been set to alert, or without security profiles
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
