How to exclude the source IP address

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

How to exclude the source IP address

how to exclude the source IP from firewall alert in palo alto.The source IP is our internal scanner and should be excluded from alerts

1 REPLY 1

L4 Transporter

Hi 

 

Not sure which alerts you are talking about specifically, but all the profiles will allow the addition of an exclusion for this purpose, they are usually in the form of the threat being assed

 

So For scanning you can add an exclusion in the zone protection profile 

laurence64_0-1726119694253.png

For Anti-Virus you can add an exception for applications,  

 

laurence64_1-1726119745169.png

Anti-Spyware has both Signature and DNS Exceptions

 

laurence64_2-1726119812058.png

And Vulnerability has signature exceptions as well

laurence64_3-1726119875292.png

 

As you mention scanner I assume it is a network scanner and triggering the alerts from the zone protection profile so I would suggest the first screenshot is where you should start, hope that helps, please leave a like and mark as solution if it did!

 

 

 

 

 

PCCSA PCNSA PCNSE PCSAE
Mode44 LTD Palo Alto Consultants
  • 310 Views
  • 1 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!