About AdamCoombs

I have a idea to use the Palo Alto Firewall Vulnerability Protection Profile has a IDS sensor.  Here is the idea I have what to run this by anyone. Also need help to know if this will work.    Vulnerability vulenerability Protection Profile Create a Rule Rule Name: IDS Test Threat Name: any Action: Alert Host Type: ? Category: brute-force, DOS, scan create a zone for user pc and laptops create a zone for all servers and equipment  then assign that profile to these zones   Then using the logging from the palo alto to send it to a seim where you can setup a alert to be sent out correct people to look into this issue.   Questions If a pc is scanning a bunch of other pc's will that create a alert? Reason I ask to see if this will work inside its own zone.     ... View more

Hello, in the security policy that is setup. Is it best to set the application and services the same? So this will help keep that security policy safe from outside device try to see what other application can be use on that security policy.  example would be a nmap script using get commands with additionals handshakes in the script, so the logging would look like  zone untrust zone trust source 1.1.1.1 dest 2.2.2.2 port 80 application is portmapper action is allow    you set the security policy to allow untrust zone to trust zone with application any services 80 and 443.  could this be use as a DOS attack if the application is not set the same as services is?     ... View more