Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- Get Started
- News & Events
- Collaboration
- Education Services
- Technologies
- Next-Generation Firewall
- GlobalProtect
- Threat Prevention Services
- Endpoint Protection
- SSL Decryption
- App-ID
- Content-ID
- User-ID
- 5G
- IoT Security
- Cloud Identity Engine
Network Security
- Prisma Access
- Prisma Cloud
- Prisma SD-WAN
- CN-Series
- VM-Series:
- Alibaba
- AWS
- GCP
- Azure
Cloud Security
- Cortex XDR
- Cortex XSOAR
- Cortex Data Lake
Security Operations
- Resources
- COVID-19 Response Center
About rivkin
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for
- LIVEcommunity
- About rivkin
12-02-2015
9Posts
1Like
0Solutions
Dec 02, 2015Last Visited
User
Activity
User
Profile
Latest posts by rivkin
| Subject | Views | Posted |
|---|---|---|
| 537 | 06-09-2015 06:48 AM | |
| 1698 | 06-08-2015 11:20 AM | |
| 1698 | 06-08-2015 09:25 AM | |
| 1698 | 06-08-2015 07:32 AM | |
| 1698 | 06-08-2015 07:07 AM |
My Liked Posts
| Subject | Likes | Posted |
|---|---|---|
| 1 Like | 06-08-2015 07:07 AM |
Posts I Liked
| Subject | Likes | Author | Latest Post |
|---|---|---|---|
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like | |||
| 1 Like |
User Badges
Community Statistics
| Member Since | 05-16-2014 07:51 AM |
| Date Last Visited | 12-02-2015 01:36 PM |
| Posts | 9 |
| Total Likes Received | 1 |
06-09-2015
06:48 AM
Since the PAN was new last year, and they didn't ask for us to disable, and we got a genuine report, going to leave it alone. If they flag it, we'll worry about it. We alos have ingress rules with our ISP, so our web servers only talk what we want, even without the PAN. Part of the assessment is a direct scan of the servers internally, so if we have vulnerabilities, that should get it. Thanks everyone! Rich
... View more
06-08-2015
11:20 AM
That's a lot of apps and ports... I'll run this by the sec analyst. Thanks! Rich
... View more
06-08-2015
09:25 AM
@phil So, the only thing in the whitelist policy is a different profile, and a source (specified addresses)? Otherwise any/any? thanks! Rich
... View more
06-08-2015
07:07 AM
1 Kudo
Yes, taht's exactly what I meant. Helpful, but not fun. 😉 So, basically make a rule that encompasses all of my untrust to dmz policies, but turn off the profiles? Thank you!
... View more
06-05-2015
02:20 PM
We're having a vulnerability assessment done, and want to make sure that the IDS/IPS part doesn't disable all attempts from the vendors IP addresses, just the application blocking/service blocking. Can I whitelist the 4 IP addresses and put them in a policy saying that for these addresses, do everything normally besides shutdown all communications from these addresses?
... View more
Labels:
- Labels:
-
Configuration
04-15-2015
10:37 AM
So, I, like a number of people, converted from Cisco to PAN. We had a consultant in to help with the conversion, and he was assisting with the rule cleanup. However, a) a lot of rules came straight across as it was time-critical, so they are service based, and b) I have trouble wrapping my head around app-based policies. Is there a tool that can help with converting all of my port/protocol based rules to app policies? Something like the conversion tool, but for use post-cutover as opposed to during the conversion? I just had to dump a list of policies for an auditor, and realized that we should be cleaning up so that humans that aren't us have a chance of reading/understanding these. 😉 Thanks! Rich
... View more
Labels:
- Labels:
-
Configuration
-
Management
LEGAL NOTICES
Copyright 2007 - 2021 - Palo Alto Networks
