Palo Alto Firewall - Security Policy Rules [2023]

[@ruxpi]

Clear and to the point!

[@netsums]

Thank you for the comment.

[@Allie19863]

Great video! Thanks for sharing!!!

[@netsums]

Thank you also for the comment, I'm glad you liked it!

[@kalibygomes3443]

Excelente !

[@baller15g]

Good video man thanks

[@netsums]

You're welcome, thank you also for the feedback. 😊

[@netsums]

FREE Palo Alto Cheat Sheet in different formats and further FREE resources: netsums.com/resources

[@segolenechesneau4310]

Thanks a lot for the useful content!

[@netsums]

Glad it was helpful!

[@edmundsiew3292]

Thanks for the great video. Hope you can help to clear some of my doubts. I have been seeing words like “rule”, “ruleset”, “rulebase”. Can you pls help to explain what is each of this word referring to with illustration from the GUI. Many thanks…

[@netsums]

I'm not English native, so I'm not 100% sure if my answer is accurate. I consider ruleset and rulebase interchangeable. For me theybmean the same: the list of the rules you have on your firewall. And a rule would be a single entry in your policies. I hope I could help

[@1695AB]

I thoughtthe lower the rule the higher its priority. In your case there is deny rule for all kind of traffic which is lower than the one you created. Isn't it supposed to block any connectivity from linux1 to linux2?

[@netsums]

No, the firewall verifies the rules from top to bottom. So the first rule the firewall checks is the allow icmp. The ssh rule I entered was in position 2, and it gets analized before the denyAny.

[@1695AB]

@ thank you, got it now;)

[@jorgitogaitan]

If I have a tule w regions only for US, that means all other countries get dropped? Or do I need to define to drop/deny w another rule?

[@netsums]

Sorry for the late reply. The Palo Alto firewalls have two implicit Security Rules: "Deny cross-zone traffic" and "Allow same-zone traffic". So if your rule for all other countries would be cross-zone (going from one zone to another, like inside -> outside), you don't need to define a custom drop/deny rule.

[@jorgitogaitan]

@@netsums thank you very much!

[@earthrocks7885]

Great video thanks but I have to admit the music is super annoying.

[@netsums]

Thank you for the feedback. I have removed the background music in the newer videos.