Firewall rules for update palo alto´s firewall content on CP

[AfterMath]

Hi Guys!

Anyone can advise on how to configure the Check Point firewall rule for palo alto fw update its contents?

Thanks in advance. 

[AfterMath]

*Instead of put

PA FW (x.x.x.x) to all internet on service https (tcp.443) accept...!

[G_W_Albrecht]

You should check for PA FW which connections & ports are needed for updates in the documentation.

[AfterMath]

Thanks @G_W_Albrecht 

The question is about the destination (all_internet)

So how to permit only PA  on destination for content updates!

 

[G_W_Albrecht]

What is PA on destination ? There should be documentation on which sites get accessed for updates, CP has that, too.

[r1der]

What GW said. PA should have documentation on it.
I'd think it will be something like *.paloaltonetworks.com instead of "all Internet"

[the_rock]

I agree with the guys...Palo Alto should have doc on that.