Palo Alto Networks
TMA-PALOALTO-6.5
Ensure a secure anti-spyware profile is applied to all security policies permitting traffic to the Internet
Description
Create one or more anti-spyware profiles and collectively apply them to all security policies permitting traffic to the Internet. The anti-spyware profiles may be applied to the security policies directly or through a profile group.
How it is checked
Audit method: Manual review
Navigate to Objects > Security Profiles > Anti-Spyware. Also navigate to Policies > Security. Verify there are one or more anti-spyware profiles that collectively apply to all inside to outside traffic from any address to any address and any application and service.
How it is fixed
Fix method: Guidance or infrastructure patch
Navigate to Objects > Security Profiles > Anti-Spyware. Also navigate to Policies > Security. Set one or more anti-spyware profiles to collectively apply to all inside to outside traffic from any address to any address and any application and service.
Properties
- Operating systems
- Any
- Tags
- paloaltothreat-prevention
- Reference
- CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 6.5 Ensure a secure anti-spyware profile is applied to all security policies permitting traffic to the Internet