Cyber Security - Palo Alto Security Policies
Posted keepmoving1113
tags:
篇首语:本文由小常识网(cha138.com)小编为大家整理,主要介绍了Cyber Security - Palo Alto Security Policies相关的知识,希望对你有一定的参考价值。
Security policies:
- Enforcing network traffic by configuring rules of what is allowed or denied to communicate between logical network segments (zones)
- Traffic can be policed with the following parameters:
- IP Address (source and/or destination)
- Users
- Services(ports)
- Applications
(From Packt)
- Enforcement hierarchy:
- Is essential to understand the security policy order of enforcement to avoid policy overruling
- "A clean policy table limits the possibility of policy overruling"
Task 1
Please block the student wireless network from reaching the server subnet.
Source Zone Source Address Student Wireless: 10.10.0.0/22 Server Subnet: 10.30.0.0/23 Destination Zone Destination Address
Configure the firewall policy.
Task 2
We are getting complaints of employees watching Netflix during work hours and it‘s causing our internet connection to crawl.
- Please block the employee subnet 10.25.0.0/23 from accessing Netflix.
Configure the firewall policy.
以上是关于Cyber Security - Palo Alto Security Policies的主要内容,如果未能解决你的问题,请参考以下文章
Cyber Security - Palo Alto Firewall V-Wires
Cyber Security - Palo Alto Firewall Objects Addresses, Services, and Groups
Cyber Security - Palo Alto Firewall Objects Addresses, Services, and Groups