TMA-PALOALTO-6.2
Ensure a secure antivirus profile is applied to all relevant security policies
説明
Create a secure antivirus profile and apply it to all security policies that could pass HTTP, SMTP, IMAP, POP3, FTP, or SMB traffic. The antivirus profile may be applied to the security policies directly or through a profile group.
チェック方法
監査方法: 手動レビュー
この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。
Navigate to Policies > Security . For each policy, navigate to [Policy Name] > Actions Verify there is a secure Antivirus profile applied to all security policies passing traffic - regardless of protocol. This can be set by Profiles or by Profile Group.
修正方法
修正方法: ガイダンスまたは IaC パッチ
Navigate to Policies > Security . For each policy, navigate to [Policy Name] > Actions Set an Antivirus profile or a Profile Group containing an AV profile for each security policy passing traffic - regardless of protocol.
プロパティ
- オペレーティングシステム
- すべて
- タグ
- paloaltothreat-prevention
- 参照
- CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 6.2 Ensure a secure antivirus profile is applied to all relevant security policies