Security Profile Evaluation

[Edsnow]

Hey Community!

In Palo Alto NGFW, when multiple Security Profiles (like Antivirus, Anti-Spyware, Vulnerability Protection, URL Filtering, File Blocking, DLP, etc.) are applied to a Security Policy

How does the inspection happen?

• Is it sequential (one profile after another)?
• Or is it parallel (all inspections happen simultaneously)?
• Also, if a packet matches one profile (say Antivirus), does the firewall stop further inspection, or does it continue evaluating against the rest of the profiles?

Would love to hear your insights and real-world experience on this!

Drop your thoughts, and let’s decode this together.

#CyberSecurity #PaloAltoNetworks #NetworkSecurity #NGFW #Firewall #ThreatPrevention #DeepPacketInspection #InfoSec #SecurityProfiles

[fabioaquino]

Hi Edsnow,
Palo Alto firewalls have an advantage over many others in that they have a feature called Single Pass Architecture (SP3), where all their processing is carried out in parallel.

For more details, see the documentation below:

https://www.paloaltonetworks.com.br/resources/whitepapers/single-pass-parallel-processing-architectu...