TMAegis

Explorador de regras

Navegue por todas as regras de hardening do catálogo. Filtre por plataforma, severidade, nível do perfil e se a verificação pode ser automatizada.

81 regras encontradasde 11.219Página 2 de 4

IDTítuloSeveridade
TMA-PALOALTO-6.4Ensure DNS sinkholing is configured on all anti-spyware profiles in usepaloalto · Nível 1Alta
TMA-PALOALTO-6.5Ensure a secure anti-spyware profile is applied to all security policies permitting traffic to the Internetpaloalto · Nível 1Alta
TMA-PALOALTO-6.6Ensure a Vulnerability Protection Profile is set to block attacks against critical and high vulnerabilities, and set to default on medium, low, and informational vulnerabilitiespaloalto · Nível 1Alta
TMA-PALOALTO-6.7Ensure a secure Vulnerability Protection Profile is applied to all security rules allowing trafficpaloalto · Nível 1Alta
TMA-PALOALTO-6.11Ensure all HTTP Header Logging options are enabledpaloalto · Nível 1Alta
TMA-PALOALTO-6.20Ensure that 'Wildfire Inline ML Action' on antivirus profiles are set to reset-both on all decoders except 'imap' and 'pop3'paloalto · Nível 1Alta
TMA-PALOALTO-6.21Ensure that 'Wildfire Inline ML' on antivirus profiles are set to enable for all file typespaloalto · Nível 1Alta
TMA-PALOALTO-6.22Ensure that 'Inline Cloud Analysis' on Vulnerability Protection profiles are enabled if 'Advanced Threat Prevention' is availablepaloalto · Nível 1Alta
TMA-PALOALTO-6.23Ensure that 'Cloud Inline Categorization' on URL Filtering profiles are enabled if 'Advanced Threat Prevention' is availablepaloalto · Nível 1Alta
TMA-PALOALTO-6.24Ensure that 'Inline Cloud Analysis' on Anti-Spyware profiles are enabled if 'Advanced Threat Prevention' is availablepaloalto · Nível 1Alta
TMA-PALOALTO-6.25Ensure that 'DNS Policies' is configured on Anti-Spyware profiles if 'DNS Security' license is availablepaloalto · Nível 1Alta
TMA-PALOALTO-7.2Ensure 'Service setting of ANY' in a security policy allowing traffic does not existpaloalto · Nível 1Alta
TMA-PALOALTO-7.3Ensure 'Security Policy' denying any/all traffic to/from IP addresses on Trusted Threat Intelligence Sources Existspaloalto · Nível 1Alta
TMA-PALOALTO-8.1Ensure 'SSL Forward Proxy Policy' for traffic destined to the Internet is configuredpaloalto · Nível 1Alta
TMA-PALOALTO-8.2Ensure 'SSL Inbound Inspection' is required for all untrusted traffic destined for servers using SSL or TLSpaloalto · Nível 1Alta
TMA-PALOALTO-8.3Ensure that the Certificate used for Decryption is Trustedpaloalto · Nível 2Alta
TMA-PALOALTO-TLS-MIN-VERSIONEnsure SSL/TLS service profiles do not allow TLS 1.0 or 1.1paloalto · Nível 1Alta
TMA-PALOALTO-1.1.1.1Syslog logging should be configuredpaloalto · Nível 1Média
TMA-PALOALTO-1.1.3Ensure 'Enable Log on High DP Load' is enabledpaloalto · Nível 1Média
TMA-PALOALTO-1.2.5Ensure valid certificate is set for browser-based administrator interfacepaloalto · Nível 2Média
TMA-PALOALTO-1.3.2Ensure 'Minimum Length' is greater than or equal to 12paloalto · Nível 1Média
TMA-PALOALTO-1.3.3Ensure 'Minimum Uppercase Letters' is greater than or equal to 1paloalto · Nível 1Média
TMA-PALOALTO-1.3.4Ensure 'Minimum Lowercase Letters' is greater than or equal to 1paloalto · Nível 1Média
TMA-PALOALTO-1.3.5Ensure 'Minimum Numeric Letters' is greater than or equal to 1paloalto · Nível 1Média
TMA-PALOALTO-1.3.6Ensure 'Minimum Special Characters' is greater than or equal to 1paloalto · Nível 1Média