Ensure a secure antivirus profile is applied to all relevant security policies

ÉlevéeNiveau 1Revue manuellepaloalto

Description

Create a secure antivirus profile and apply it to all security policies that could pass HTTP, SMTP, IMAP, POP3, FTP, or SMB traffic. The antivirus profile may be applied to the security policies directly or through a profile group.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Navigate to Policies > Security . For each policy, navigate to [Policy Name] > Actions Verify there is a secure Antivirus profile applied to all security policies passing traffic - regardless of protocol. This can be set by Profiles or by Profile Group.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Navigate to Policies > Security . For each policy, navigate to [Policy Name] > Actions Set an Antivirus profile or a Profile Group containing an AV profile for each security policy passing traffic - regardless of protocol.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: paloaltothreat-prevention
Référence: CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 6.2 Ensure a secure antivirus profile is applied to all relevant security policies