Ensure that User Credential Submission uses the action of "block" or "continue" on the URL categories

보통레벨 1수동 검토paloalto

설명

Ideally user names and passwords user within an organization are not used with third party sites. Some sanctioned SAS applications may have connections to the corporate domain, in which case they will need to be exempt from the user credential submission policy through a custom URL category.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Navigate to Objects > Security Profiles > URL Filtering. Choose the Categories tab. Verify that the User Credential Submitting action on all enabled URL categories is set to either block or continue. Under the User Credential Detection tab ensure the User Credential Detection is set to a value appropriate to your organization, and is not set to Disabled. Verify that the Log Severity value is set to a value appropriate to your organization and your logging or SIEM solution.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Navigate to Objects > Security Profiles > URL Filtering. Choose the Categories tab. Set the User Credential Submitting action on all enabled URL categories is either block or continue, as appropriate to your organization and the category. Under the User Credential Detection tab set the User Credential Detection value to a setting appropriate to your organization, any value except Disabled. Set the Log Severity to a value appropriate to your organization and your logging or SIEM solution.

속성

운영 체제: 모두
태그: paloaltoauthentication
참고 자료: CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 6.19 Ensure that User Credential Submission uses the action of "block" or "continue" on the URL categories