Zone Protection on GlobalProtect Zone

Reply
Highlighted
L2 Linker

Zone Protection on GlobalProtect Zone

Dear Team,

 

I have a question do you recommend putting Zone protection on the Zone which I have for GP. I am using loopback External IP for the connection and in the GP Zone I have added the tunnel interface. 

 

Just want to understand if best practice to put zone protection on this zone?

 

Thanks


Accepted Solutions
Highlighted
L2 Linker

Re: Zone Protection on GlobalProtect Zone

@umar00o The general Palo Alto best practices recommendation is to apply zone protection to all zones, however realistically there is no much use for ZP on it.This is just a virtual interface used only for the GP tunnel binding and there will not be much of benefit in using zone protection. 

View solution in original post

Highlighted
L2 Linker

Re: Zone Protection on GlobalProtect Zone

Hi Batd2,

 

Thank you very much for the clarificatoins.

 

Thanks

View solution in original post


All Replies
Highlighted
L2 Linker

Re: Zone Protection on GlobalProtect Zone

@umar00o The general Palo Alto best practices recommendation is to apply zone protection to all zones, however realistically there is no much use for ZP on it.This is just a virtual interface used only for the GP tunnel binding and there will not be much of benefit in using zone protection. 

View solution in original post

Highlighted
L2 Linker

Re: Zone Protection on GlobalProtect Zone

Hi Batd2,

 

Thank you very much for the clarificatoins.

 

Thanks

View solution in original post

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!