Ensure 'Permitted IP Addresses' is set for all management profiles where SSH, HTTPS, or SNMP is enabled

高レベル 1手動レビューpaloalto

説明

For all management profiles, only the IP addresses required for device management should be specified.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Navigate to Network > Network Profiles > Interface Management. In each profile, for each of the target protocols (SNMP, HTTPS, SSH), verify that Permitted IP Addresses is limited to those necessary for device management.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Navigate to Network > Network Profiles > Interface Management. In each profile, for each of the target protocols (SNMP, HTTPS, SSH), set Permitted IP Addresses to only include those necessary for device management. If no profile exists, create one that has these options set.

プロパティ

オペレーティングシステム: すべて
タグ: paloaltosnmp
参照: CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 1.2.2 Ensure 'Permitted IP Addresses' is set for all management profiles where SSH, HTTPS, or SNMP is enabled