Zone protection profiles are a great way to help protect your network from attacks, including common flood, reconnaissance attacks, and other packet-based attacks. live.paloalton...
How do you decide what would be an acceptable rate for each one of those tabs in flood and Packet Based attack protection ? I know that it depends individual case on the amount of traffic firewall handles. But where do we get started?
Hi Alex Lora, zone protection applied to the untrust zone is best practice. Please see docs.paloaltonetworks.com/best-practices/10-1/dos-and-zone-protection-best-practices/dos-and-zone-protection-best-practices for DoS and Zone protection best practice.
I have the same doubt. At one point the presenter said something like 'this will protect addresses within the zone you are applying the profile to'. I don't want to protect addresses within the untrust zone but rather protect my trusted zone from addresses in the untrust zone.
Thanks for asking. The reason that you want to protect the "Untrusted Zone" is because that is where your firewall will be "vulnerable" from, which is why you want the protection on that zone. Sorry for any confusion.
Zone protection applies to inbound traffic to the zone. So untrust leads to the Internet. So there are uncontrolled sources out there that can send malacious traffic into the firewall.
I watched all the videos in this series, but this video is the worst, the narrator just reads what is on the screen. Thank you I can read also. Better he explains more technical details.
I am sorry that you didn't like it. Kim was trying to explain the details in every section and every option, not just read what is on the screen. We will keep that in mind for future videos.
