Ensure that 'DNS Policies' is configured on Anti-Spyware profiles if 'DNS Security' license is available

AltaNivel 1Revisión manualpaloalto

Descripción

DNS security is an extensible cloud-based service capable of generating DNS signatures using advanced predictive analytics and machine learning. DNS Security protects from sophisticated DNS-based attacks.

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Objects > Security Profiles > Anti-Spyware > DNS Policies (requires a DNS Security licence): confirm the policy action is sinkhole for every DNS Security category, and that the Command and Control Domains category uses packet capture extended-capture.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Navigate to Objects > Security Profiles > Anti-Spyware Go to DNS Policies tab. Configure policy action to sinkhole for all DNS Security categories. On Command and control Domains category, set the packet capture option to extended-capture.

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: paloaltothreat-prevention
Referencia: CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 6.25 Ensure that 'DNS Policies' is configured on Anti-Spyware profiles if 'DNS Security' license is available