Palo alto WAF risk assessment

[gajji229]

I got request to do PA WAF risk assessment for my environment, do you have any suggestions how should i do Any documents/steps/url that i can follow to do the same.

[JayGolf]

Hi @gajji229 ,

Hope you're doing well!

If you have a public-facing web application that handles sensitive data, it's a good idea to include a dedicated Web Application Firewall (WAF) in your architecture alongside your Next-Generation Firewall (NGFW). You might want to check out Prisma Cloud's Web-Application and API Security (WAAS) offering—it could be a great fit for your organization's needs.

When doing your assessment, consider the differences between NGFW and WAFs. It's important to determine whether it's acceptable for your organization to operate without a dedicated WAF. Keep in mind that assessing just the NGFW might not cover all the crucial areas a WAF is designed to protect.

[PavelK]

Hello @gajji229

to only add what Jay mentioned it is crucial to enabled inbound ssl decryption to allow Firewall have a full visibility into incoming traffic.

Kind Regards

Pavel