Security Policy for SSL & Web-Browsing only

[ArthurAT]

Hi,

I was wondering, is it bad practice to create a security policy with only the applications SSL & Web-Browsing in it? Ensuring best practice security profiles are on the policy as well.

I've tried searching the web for suggestions and might be missing it. If someone can point me in the right direction?

[arusharma]

You cna begin from here: https://docs.paloaltonetworks.com/best-practices/internet-gateway-best-practices/best-practice-inter...

It depends on your setup and what access you need to provide to the users. 

[ArthurAT]

Thank you very much!

I'm also just curious what other environments do, not to say they are following best practice but just to find some extra knowledge from others.