Video Tutorial: Zone Protection Profiles

Zone protection profiles are a great way to help protect your network from attacks, including common flood, reconnaissance attacks, and other packet-based attacks.
live.paloaltonetworks.com/t5/...

[@emmagustavson2887]

Thank you very much for the clear explanation! This will help a lot with my CCDC competition!

[@kalibygomes3443]

Thank you!!!!

[@MRangelgaboo]

Good job.

[@pravallikadasari5532]

How do you decide what would be an acceptable rate for each one of those tabs in flood and Packet Based attack protection ? I know that it depends individual case on the amount of traffic firewall handles. But where do we get started?

[@ngurjar100]

No particular answer...apply, observe, learn, update and relearn..also understand your app behaviour w.r.t legit traffic

[@bharatrajwanshi4366]

th-cam.com/video/wmMcdndG-KQ/w-d-xo.html

[@bharatrajwanshi4366]

th-cam.com/video/wmMcdndG-KQ/w-d-xo.html

[@praveenbhatt6935]

I want one question if you want to reach Google so how your pc will verify the certificate is valid or not

[@alexlora6009]

hi, do you recommends to apply zone protection in the WAN/outside zone?

[@PaloAltoNetworksLiveCommunity]

Hi Alex Lora, zone protection applied to the untrust zone is best practice. Please see docs.paloaltonetworks.com/best-practices/10-1/dos-and-zone-protection-best-practices/dos-and-zone-protection-best-practices
for DoS and Zone protection best practice.

[@yeruelbirku8929]

How can enable spoofing

[@ioannis69k]

Junos screens on steroids ! Nice

[@ashokreddyb7867]

I've a doubt... Why did you apply "Zone Protection Policy" on untrust zone?? Can anyone dispel my doubt?? A reply is much appreciated.

[@tasleemarif9920]

Its gateway, so applied.

[@leebailey001]

I have the same doubt. At one point the presenter said something like 'this will protect addresses within the zone you are applying the profile to'. I don't want to protect addresses within the untrust zone but rather protect my trusted zone from addresses in the untrust zone.

[@PaloAltoNetworksLiveCommunity]

Thanks for asking. The reason that you want to protect the "Untrusted Zone" is because that is where your firewall will be "vulnerable" from, which is why you want the protection on that zone. Sorry for any confusion.

[@ngurjar100]

Zone protection applies to inbound traffic to the zone. So untrust leads to the Internet. So there are uncontrolled sources out there that can send malacious traffic into the firewall.

[@bharatrajwanshi4366]

th-cam.com/video/wmMcdndG-KQ/w-d-xo.html

[@markmaxwell6818]

Another great video but you need a new keyboard / mouse. That mouse click was driving me nuts!

[@PaloAltoNetworksLiveCommunity]

Thanks for the watch, and I will see about getting a better solution for Kim.

[@TheMikael42]

Please drink a coffee before giving a training. Thanks for the nice work.

[@PaloAltoNetworksLiveCommunity]

Thanks for the advise Mikaël !

[@LivingCurios]

I watched all the videos in this series, but this video is the worst, the narrator just reads what is on the screen. Thank you I can read also. Better he explains more technical details.

[@PaloAltoNetworksLiveCommunity]

I am sorry that you didn't like it. Kim was trying to explain the details in every section and every option, not just read what is on the screen. We will keep that in mind for future videos.

[@bharatrajwanshi4366]

th-cam.com/video/wmMcdndG-KQ/w-d-xo.html