Security profile testing

[Jamesy]

I am currently building out more granular policies that have application groups applied as well as security profiles for AV, malware, vulnerability and URL filtering. I will be applying these to a test firewall and would like to build out a test plan to ensure they are working as expected.

I just wanted to run this by the community to see if perhaps there were any recommendations on testing the AV, malware and vulnerability side of things?

[hisingh]

Hello @Jamesy 

I would suggest going through the best practices, you can find the documents here: https://docs.paloaltonetworks.com/best-practices/9-0/internet-gateway-best-practices/best-practice-i...

Best

Himani

[Jamesy]

Hi Himani,

I have gone through the best practice docs and used these to build the profiles and policies. I would like to be able to test these before applying them in production. I want to have a checklist to ensure that they profiles don't a) cause any blockages to traffic and b) are blocking malicious/ unsanctioned traffic as intended.

Thanks,

Jamesy