Ensure that 'DNS Policies' is configured on Anti-Spyware profiles if 'DNS Security' license is available

높음레벨 1수동 검토paloalto

설명

DNS security is an extensible cloud-based service capable of generating DNS signatures using advanced predictive analytics and machine learning. DNS Security protects from sophisticated DNS-based attacks.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Objects > Security Profiles > Anti-Spyware > DNS Policies (requires a DNS Security licence): confirm the policy action is sinkhole for every DNS Security category, and that the Command and Control Domains category uses packet capture extended-capture.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Navigate to Objects > Security Profiles > Anti-Spyware Go to DNS Policies tab. Configure policy action to sinkhole for all DNS Security categories. On Command and control Domains category, set the packet capture option to extended-capture.

속성

운영 체제: 모두
태그: paloaltothreat-prevention
참고 자료: CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 6.25 Ensure that 'DNS Policies' is configured on Anti-Spyware profiles if 'DNS Security' license is available