About rivkin

We're having a vulnerability assessment done, and want to make sure that the IDS/IPS part doesn't disable all attempts from the vendors IP addresses, just the application blocking/service blocking. Can I whitelist the 4 IP addresses and put them in a policy saying that for these addresses, do everything normally besides shutdown all communications from these addresses? ... View more

So, I, like a number of people, converted from Cisco to PAN.  We had a consultant in to help with the conversion, and he was assisting with the rule cleanup.  However, a) a lot of rules came straight across as it was time-critical, so they are service based, and b) I have trouble wrapping my head around app-based policies.  Is there a tool that can help with converting all of my port/protocol based rules to app policies?  Something like the conversion tool, but for use post-cutover as opposed to during the conversion? I just had to dump a list of policies for an auditor, and realized that we should be cleaning up so that humans that aren't us have a chance of reading/understanding these. 😉 Thanks! Rich ... View more