Ensure secure URL filtering is enabled for all security policies allowing traffic to the Internet

MediumLevel 1Manual reviewpaloalto

Description

Apply a secure URL filtering profile to all security policies permitting traffic to the Internet. The URL Filtering profile may be applied to the security policies directly or through a profile group.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

To Verify URL Filtering: For each Security Policy that transits traffic to the public internet, navigate to Policies > Security > Security Profiles > [Policy Name] > Actions. Verify there is a URL Filtering profile that complies with the policies of the organization is applied to all Security Policies that transit traffic to the public internet.

How it is fixed

Fix method: Guidance or infrastructure patch

To Set URL Filtering: For each Security Profile that transits traffic to the internet, navigate to Policies > Security > Security Profiles > [Policy Name] > Actions. Set a URL Filtering profile that complies with the policies of the organization is applied to all Security Policies that transit traffic to the public internet.

Properties

Operating systems: Any
Tags: paloaltothreat-prevention
Reference: CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 6.12 Ensure secure URL filtering is enabled for all security policies allowing traffic to the Internet