TMA-PALOALTO-6.2

Ensure a secure antivirus profile is applied to all relevant security policies

높음레벨 1수동 검토paloalto

설명

Create a secure antivirus profile and apply it to all security policies that could pass HTTP, SMTP, IMAP, POP3, FTP, or SMB traffic. The antivirus profile may be applied to the security policies directly or through a profile group.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Navigate to Policies > Security . For each policy, navigate to [Policy Name] > Actions Verify there is a secure Antivirus profile applied to all security policies passing traffic - regardless of protocol. This can be set by Profiles or by Profile Group.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Navigate to Policies > Security . For each policy, navigate to [Policy Name] > Actions Set an Antivirus profile or a Profile Group containing an AV profile for each security policy passing traffic - regardless of protocol.

속성

운영 체제: 모두
태그: paloaltothreat-prevention
참고 자료: CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 6.2 Ensure a secure antivirus profile is applied to all relevant security policies