topic Firewall rules for update palo alto´s firewall content on CP in Firewall and Security Management

Firewall rules for update palo alto´s firewall content on CP

AfterMath — Fri, 27 May 2022 07:40:36 GMT

Hi Guys!

Anyone can advise on how to configure the Check Point firewall rule for palo alto fw update its contents?

Thanks in advance.

AfterMath — Fri, 27 May 2022 07:59:40 GMT

*Instead of put

PA FW (x.x.x.x) to all internet on service https (tcp.443) accept...!

G_W_Albrecht — Fri, 27 May 2022 08:32:19 GMT

You should check for PA FW which connections & ports are needed for updates in the documentation.

AfterMath — Fri, 27 May 2022 09:14:23 GMT

Thanks @G_W_Albrecht

The question is about the destination (all_internet)

So how to permit only PA on destination for content updates!

G_W_Albrecht — Fri, 27 May 2022 11:30:43 GMT

What is PA on destination ? There should be documentation on which sites get accessed for updates, CP has that, too.

r1der — Fri, 27 May 2022 23:25:21 GMT

What GW said. PA should have documentation on it.
I'd think it will be something like *.paloaltonetworks.com instead of "all Internet"

the_rock — Fri, 27 May 2022 23:45:19 GMT

I agree with the guys...Palo Alto should have doc on that.