TMA-PALOALTO-6.7
Ensure a secure Vulnerability Protection Profile is applied to all security rules allowing traffic
설명
For any security rule allowing traffic, apply a securely configured Vulnerability Protection Profile. Careful analysis of the target environment should be performed before implementing this configuration, as outlined by PAN's "Threat Prevention Deployment Tech Note" in the references section.
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
Navigate to Policies > Security. For each Policy, under the Actions tab, select Vulnerability Protection. Verify either the 'Strict' or the 'Default' profile is selected, or a custom profile that complies with the organization's policies, legal and regulatory requirements.
조치 방법
조치 방식: 가이드 또는 인프라 패치
Navigate to Policies > Security. For each Policy, under the Actions tab, select Vulnerability Protection. Set it to use either the 'Strict' or the 'Default' profile, or a custom profile that complies with the organization's policies, legal and regulatory requirements.
속성
- 운영 체제
- 모두
- 태그
- paloaltothreat-prevention
- 참고 자료
- CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 6.7 Ensure a secure Vulnerability Protection Profile is applied to all security rules allowing traffic