Ensure a secure Vulnerability Protection Profile is applied to all security rules allowing traffic

ÉlevéeNiveau 1Revue manuellepaloalto

Description

For any security rule allowing traffic, apply a securely configured Vulnerability Protection Profile. Careful analysis of the target environment should be performed before implementing this configuration, as outlined by PAN's "Threat Prevention Deployment Tech Note" in the references section.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Navigate to Policies > Security. For each Policy, under the Actions tab, select Vulnerability Protection. Verify either the 'Strict' or the 'Default' profile is selected, or a custom profile that complies with the organization's policies, legal and regulatory requirements.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Navigate to Policies > Security. For each Policy, under the Actions tab, select Vulnerability Protection. Set it to use either the 'Strict' or the 'Default' profile, or a custom profile that complies with the organization's policies, legal and regulatory requirements.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: paloaltothreat-prevention
Référence: CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 6.7 Ensure a secure Vulnerability Protection Profile is applied to all security rules allowing traffic