This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Cookie Policy. Click Preferences to customize your cookie settings.
About Kris.Waddle
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- About Kris.Waddle
12-16-2019
3Posts
3Likes
0Solutions
Dec 16, 2019Last Visited
User
Activity
User
Profile
Latest posts by Kris.Waddle
| Subject | Views | Posted |
|---|---|---|
| 2549 | 12-16-2019 09:38 AM | |
| 15924 | 11-06-2019 07:48 AM | |
| 6663 | 07-15-2019 02:49 PM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 2 Likes | 12-16-2019 09:38 AM | |
| 1 Like | 11-06-2019 07:48 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like |
User Badges
Community Statistics
| Member Since | 07-15-2019 02:41 PM |
| Date Last Visited | 12-16-2019 12:59 PM |
| Posts | 3 |
| Total Likes Received | 3 |
12-16-2019
09:38 AM
2 Kudos
This may depend on the ASV that has been engaged, but building a rule to allow or deny based on port has been not allowed by our Auditors as an explicit allow for a port would an implicit deny for the non included ports.
... View more
11-06-2019
07:48 AM
1 Kudo
I've had this same question. Building several shadow rules to exempt an ASV from IPS only is not a road I want to start down. Allowing a separation between IPS and Host/Port would be 100% Helpful.
... View more
07-15-2019
02:49 PM
We are trying to exempt our ASV scanner IPs from vuln protection, AV, etc... without whitelisting them from the firewall (host/port) rules we have in place. All I can find is exempting IPs based on a single Threat ID. Thanks. PCI Scanning Standard: "13. Arrangements must be made to configure the intrusion detection system/intrusion prevention system (IDS/IPS) to accept the originating IP address of the ASV. If this is not possible, the scan should be originated in a location that prevents IDS/IPS interference "
... View more
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks