Ensure a secure Vulnerability Protection Profile is applied to all security rules allowing traffic

高レベル 1手動レビューpaloalto

説明

For any security rule allowing traffic, apply a securely configured Vulnerability Protection Profile. Careful analysis of the target environment should be performed before implementing this configuration, as outlined by PAN's "Threat Prevention Deployment Tech Note" in the references section.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Navigate to Policies > Security. For each Policy, under the Actions tab, select Vulnerability Protection. Verify either the 'Strict' or the 'Default' profile is selected, or a custom profile that complies with the organization's policies, legal and regulatory requirements.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Navigate to Policies > Security. For each Policy, under the Actions tab, select Vulnerability Protection. Set it to use either the 'Strict' or the 'Default' profile, or a custom profile that complies with the organization's policies, legal and regulatory requirements.

プロパティ

オペレーティングシステム: すべて
タグ: paloaltothreat-prevention
参照: CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 6.7 Ensure a secure Vulnerability Protection Profile is applied to all security rules allowing traffic