TMAegis

Explorador de reglas

Explore todas las reglas de endurecimiento del catálogo. Filtre por plataforma, severidad, nivel de perfil y si la verificación puede automatizarse.

81 reglas encontradasde 11.219Página 2 de 4

IDTítuloSeveridad
TMA-PALOALTO-6.4Ensure DNS sinkholing is configured on all anti-spyware profiles in usepaloalto · Nivel 1Alta
TMA-PALOALTO-6.5Ensure a secure anti-spyware profile is applied to all security policies permitting traffic to the Internetpaloalto · Nivel 1Alta
TMA-PALOALTO-6.6Ensure a Vulnerability Protection Profile is set to block attacks against critical and high vulnerabilities, and set to default on medium, low, and informational vulnerabilitiespaloalto · Nivel 1Alta
TMA-PALOALTO-6.7Ensure a secure Vulnerability Protection Profile is applied to all security rules allowing trafficpaloalto · Nivel 1Alta
TMA-PALOALTO-6.11Ensure all HTTP Header Logging options are enabledpaloalto · Nivel 1Alta
TMA-PALOALTO-6.20Ensure that 'Wildfire Inline ML Action' on antivirus profiles are set to reset-both on all decoders except 'imap' and 'pop3'paloalto · Nivel 1Alta
TMA-PALOALTO-6.21Ensure that 'Wildfire Inline ML' on antivirus profiles are set to enable for all file typespaloalto · Nivel 1Alta
TMA-PALOALTO-6.22Ensure that 'Inline Cloud Analysis' on Vulnerability Protection profiles are enabled if 'Advanced Threat Prevention' is availablepaloalto · Nivel 1Alta
TMA-PALOALTO-6.23Ensure that 'Cloud Inline Categorization' on URL Filtering profiles are enabled if 'Advanced Threat Prevention' is availablepaloalto · Nivel 1Alta
TMA-PALOALTO-6.24Ensure that 'Inline Cloud Analysis' on Anti-Spyware profiles are enabled if 'Advanced Threat Prevention' is availablepaloalto · Nivel 1Alta
TMA-PALOALTO-6.25Ensure that 'DNS Policies' is configured on Anti-Spyware profiles if 'DNS Security' license is availablepaloalto · Nivel 1Alta
TMA-PALOALTO-7.2Ensure 'Service setting of ANY' in a security policy allowing traffic does not existpaloalto · Nivel 1Alta
TMA-PALOALTO-7.3Ensure 'Security Policy' denying any/all traffic to/from IP addresses on Trusted Threat Intelligence Sources Existspaloalto · Nivel 1Alta
TMA-PALOALTO-8.1Ensure 'SSL Forward Proxy Policy' for traffic destined to the Internet is configuredpaloalto · Nivel 1Alta
TMA-PALOALTO-8.2Ensure 'SSL Inbound Inspection' is required for all untrusted traffic destined for servers using SSL or TLSpaloalto · Nivel 1Alta
TMA-PALOALTO-8.3Ensure that the Certificate used for Decryption is Trustedpaloalto · Nivel 2Alta
TMA-PALOALTO-TLS-MIN-VERSIONEnsure SSL/TLS service profiles do not allow TLS 1.0 or 1.1paloalto · Nivel 1Alta
TMA-PALOALTO-1.1.1.1Syslog logging should be configuredpaloalto · Nivel 1Media
TMA-PALOALTO-1.1.3Ensure 'Enable Log on High DP Load' is enabledpaloalto · Nivel 1Media
TMA-PALOALTO-1.2.5Ensure valid certificate is set for browser-based administrator interfacepaloalto · Nivel 2Media
TMA-PALOALTO-1.3.2Ensure 'Minimum Length' is greater than or equal to 12paloalto · Nivel 1Media
TMA-PALOALTO-1.3.3Ensure 'Minimum Uppercase Letters' is greater than or equal to 1paloalto · Nivel 1Media
TMA-PALOALTO-1.3.4Ensure 'Minimum Lowercase Letters' is greater than or equal to 1paloalto · Nivel 1Media
TMA-PALOALTO-1.3.5Ensure 'Minimum Numeric Letters' is greater than or equal to 1paloalto · Nivel 1Media
TMA-PALOALTO-1.3.6Ensure 'Minimum Special Characters' is greater than or equal to 1paloalto · Nivel 1Media