Zone Based Firewalls | Palo Alto Firewall Training

Описание: Modern firewalls don’t simply apply ACLs to interfaces as they used to. These days, interfaces are grouped into zones, and security policies are applied for traffic between zones, or even within zones.

Palo Alto firewalls have several types of zones, including tap, virtual-wire, layer-2, layer-3 and external.

Palo Alto also have additional security measures based on zones. This includes Zone Protection and Packet Buffer protection.

Zone Protection looks at threats like flooding, reconnaissance, malformed packets, non-IP traffic, and so on.

Zone Buffer Protection prevents DoS attacks that flood the packet buffer. Normally this type of attack would exhaust the packet buffer, resulting in legitimate packets being dropped.


Overview of this video:

0:00 Introduction

0:20 Traditional vs ZBF

1:40 Zone Types

3:37 Zone Protection Profile

5:28 Packet Buffer Protection


Patreon information: https://networkdirection.net/patreon/


LET'S CONNECT

🌏    / networkdirection  

🌏   / netwrkdirection  

🌏   / networkdirection  

🌏 https://www.networkdirection.net

#NetworkDirection
#networking
#paloalto