TMA-PALOALTO-6.5
Ensure a secure anti-spyware profile is applied to all security policies permitting traffic to the Internet
説明
Create one or more anti-spyware profiles and collectively apply them to all security policies permitting traffic to the Internet. The anti-spyware profiles may be applied to the security policies directly or through a profile group.
チェック方法
監査方法: 手動レビュー
この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。
Navigate to Objects > Security Profiles > Anti-Spyware. Also navigate to Policies > Security. Verify there are one or more anti-spyware profiles that collectively apply to all inside to outside traffic from any address to any address and any application and service.
修正方法
修正方法: ガイダンスまたは IaC パッチ
Navigate to Objects > Security Profiles > Anti-Spyware. Also navigate to Policies > Security. Set one or more anti-spyware profiles to collectively apply to all inside to outside traffic from any address to any address and any application and service.
プロパティ
- オペレーティングシステム
- すべて
- タグ
- paloaltothreat-prevention
- 参照
- CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 6.5 Ensure a secure anti-spyware profile is applied to all security policies permitting traffic to the Internet