CNSE 4.1 Exam Preparation GuideV3.pptx - Palo Alto Networks

Disable Server Response Inspection
• The vulnerability protection
profile by default scans traffic
going in both directions (from
client to server, and from
server to client)
• Most IPSs only examine the
traffic from the client to
server.
• The way to examine traffic
from only client to server on
the Palo Alto firewall is to
check the box to “disable
server response inspection”
on the security policy
(options column).
Page 36 |