Ensure secure URL filtering is enabled for all security policies allowing traffic to the Internet

СреднийУровень 1Ручная проверкаpaloalto

Описание

Apply a secure URL filtering profile to all security policies permitting traffic to the Internet. The URL Filtering profile may be applied to the security policies directly or through a profile group.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

To Verify URL Filtering: For each Security Policy that transits traffic to the public internet, navigate to Policies > Security > Security Profiles > [Policy Name] > Actions. Verify there is a URL Filtering profile that complies with the policies of the organization is applied to all Security Policies that transit traffic to the public internet.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

To Set URL Filtering: For each Security Profile that transits traffic to the internet, navigate to Policies > Security > Security Profiles > [Policy Name] > Actions. Set a URL Filtering profile that complies with the policies of the organization is applied to all Security Policies that transit traffic to the public internet.

Свойства

Операционные системы: Любая
Теги: paloaltothreat-prevention
Источник: CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 6.12 Ensure secure URL filtering is enabled for all security policies allowing traffic to the Internet