Cyber Security - Palo Alto Security Policies

Posted keepmoving1113

tags:

篇首语:本文由小常识网(cha138.com)小编为大家整理,主要介绍了Cyber Security - Palo Alto Security Policies相关的知识,希望对你有一定的参考价值。

Security policies:

  • Enforcing network traffic by configuring rules of what is allowed or denied to communicate between logical network segments (zones)
  • Traffic can be policed with the following parameters:
    • IP Address (source and/or destination)
    • Users
    • Services(ports)
    • Applications

技术图片

 

 (From Packt)

  • Enforcement hierarchy:
    • Is essential to understand the security policy order of enforcement to avoid policy overruling
    • "A clean policy table limits the possibility of policy overruling"

技术图片

 

 

Task 1 

Please block the student wireless network from reaching the server subnet.

Source Zone         Source Address

Student Wireless:   10.10.0.0/22

Server Subnet:      10.30.0.0/23

Destination Zone    Destination Address

 Configure the firewall policy.技术图片

 

 技术图片

 

 技术图片

 

 技术图片

 

 技术图片

 

 技术图片

 

 技术图片

 

 技术图片

 Task 2

We are getting complaints of employees watching Netflix during work hours and it‘s causing our internet connection to crawl.

- Please block the employee subnet 10.25.0.0/23 from accessing Netflix.

Configure the firewall policy.

技术图片

 

 技术图片

 

 技术图片

 

 技术图片

 

 技术图片

 

 技术图片

 

 技术图片

 

 技术图片

 

以上是关于Cyber Security - Palo Alto Security Policies的主要内容,如果未能解决你的问题,请参考以下文章

Cyber Security - Palo Alto Firewall V-Wires

Cyber Security - Palo Alto Firewall Objects Addresses, Services, and Groups

Cyber Security - Palo Alto Firewall Objects Addresses, Services, and Groups

palo alto 和 check point防火墙的区别

security3权限管理:SecurityMetadataSource不支持FilterInvocation?

如何添加 content-security-policy 头?