TMAegis

Explorador de regras

Navegue por todas as regras de hardening do catálogo. Filtre por plataforma, severidade, nível do perfil e se a verificação pode ser automatizada.

81 regras encontradasde 11.219Página 3 de 4

IDTítuloSeveridade
TMA-PALOALTO-1.4.1Ensure 'Idle timeout' is less than or equal to 10 minutes for device managementpaloalto · Nível 1Média
TMA-PALOALTO-1.5.1Ensure 'V3' is selected for SNMP pollingpaloalto · Nível 1Média
TMA-PALOALTO-1.6.2Ensure redundant NTP servers are configured appropriatelypaloalto · Nível 1Média
TMA-PALOALTO-1.6.3Ensure that the Certificate Securing Remote Access VPNs is Validpaloalto · Nível 2Média
TMA-PALOALTO-1.7.1Enabling Post-Quantum (PQ) on IKEv2 VPNspaloalto · Nível 2Média
TMA-PALOALTO-2.1Ensure that IP addresses are mapped to usernamespaloalto · Nível 2Média
TMA-PALOALTO-2.2Ensure that WMI probing is disabledpaloalto · Nível 2Média
TMA-PALOALTO-2.3Ensure that User-ID is only enabled for internal trusted interfacespaloalto · Nível 1Média
TMA-PALOALTO-2.4Ensure that 'Include/Exclude Networks' is used if User-ID is enabledpaloalto · Nível 1Média
TMA-PALOALTO-2.5Ensure that the User-ID Agent has minimal permissions if User-ID is enabledpaloalto · Nível 1Média
TMA-PALOALTO-2.6Ensure that the User-ID service account does not have interactive logon rightspaloalto · Nível 1Média
TMA-PALOALTO-2.7Ensure remote access capabilities for the User-ID service account are forbidden.paloalto · Nível 1Média
TMA-PALOALTO-2.8Ensure that security policies restrict User-ID Agent traffic from crossing into untrusted zonespaloalto · Nível 1Média
TMA-PALOALTO-3.1Ensure a fully-synchronized High Availability peer is configuredpaloalto · Nível 1Média
TMA-PALOALTO-3.2Ensure 'High Availability' requires Link Monitoring and/or Path Monitoringpaloalto · Nível 1Média
TMA-PALOALTO-3.3Ensure 'Passive Link State' and 'Preemptive' are configured appropriatelypaloalto · Nível 1Média
TMA-PALOALTO-6.8Ensure that PAN-DB URL Filtering is usedpaloalto · Nível 1Média
TMA-PALOALTO-6.9Ensure that URL Filtering uses the action of "block" or "override" on the URL categoriespaloalto · Nível 1Média
TMA-PALOALTO-6.10Ensure that access to every URL is loggedpaloalto · Nível 1Média
TMA-PALOALTO-6.12Ensure secure URL filtering is enabled for all security policies allowing traffic to the Internetpaloalto · Nível 1Média
TMA-PALOALTO-6.13Ensure alerting after a threshold of credit card or Social Security numbers is detected is enabledpaloalto · Nível 1Média
TMA-PALOALTO-6.14Ensure a secure Data Filtering profile is applied to all security policies allowing traffic to or from the Internetpaloalto · Nível 1Média
TMA-PALOALTO-6.15Ensure that a Zone Protection Profile with an enabled SYN Flood Action of SYN Cookies is attached to all untrusted zonespaloalto · Nível 1Média
TMA-PALOALTO-6.16Ensure that a Zone Protection Profile with tuned Flood Protection settings enabled for all flood types is attached to all untrusted zonespaloalto · Nível 2Média
TMA-PALOALTO-6.17Ensure that all zones have Zone Protection Profiles with all Reconnaissance Protection settings enabled, tuned, and set to appropriate actionspaloalto · Nível 1Média