Palo-Alto Zone Protection Profile
Provides protection to the Zones against the attacks
1. Create Profile
2. Apply Profile to the Zone
Under Network Tab--->Network Profile---> Zone Protection click Add
Flood Protection:- Prevents Flooding attacks
SYN--Action:- Random Early drop and SYN Cookies
Random Early drop:- Randomly drops the syn packets to lower the traffic flow
SYN Cookies:- For bogus three way handshake firewall don't keep remembering for the half form session
Reconnaissance Protection:–Detects and blocks port scans and host sweeps, detect and block host sweep and TCP & UDP port scans.
Packet Based Attack Protection:–Provides protection against specific IP level attacks
Now Apply to the External Zone
Provides protection to the Zones against the attacks
1. Create Profile
2. Apply Profile to the Zone
Under Network Tab--->Network Profile---> Zone Protection click Add
Flood Protection:- Prevents Flooding attacks
SYN--Action:- Random Early drop and SYN Cookies
Random Early drop:- Randomly drops the syn packets to lower the traffic flow
SYN Cookies:- For bogus three way handshake firewall don't keep remembering for the half form session
Reconnaissance Protection:–Detects and blocks port scans and host sweeps, detect and block host sweep and TCP & UDP port scans.
Packet Based Attack Protection:–Provides protection against specific IP level attacks
Now Apply to the External Zone
No comments:
Post a Comment