Palo Alto Networks
TMA-PALOALTO-1.2.2
Ensure 'Permitted IP Addresses' is set for all management profiles where SSH, HTTPS, or SNMP is enabled
ВисокаНиво 1Ручни прегледpaloalto
Опис
For all management profiles, only the IP addresses required for device management should be specified.
Како се проверава
Метод провере: Ручни преглед
Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.
Navigate to Network > Network Profiles > Interface Management. In each profile, for each of the target protocols (SNMP, HTTPS, SSH), verify that Permitted IP Addresses is limited to those necessary for device management.
Како се исправља
Метод исправке: Смерница или закрпа инфраструктуре
Navigate to Network > Network Profiles > Interface Management. In each profile, for each of the target protocols (SNMP, HTTPS, SSH), set Permitted IP Addresses to only include those necessary for device management. If no profile exists, create one that has these options set.
Својства
- Оперативни системи
- Било који
- Ознаке
- paloaltosnmp
- Референца
- CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 1.2.2 Ensure 'Permitted IP Addresses' is set for all management profiles where SSH, HTTPS, or SNMP is enabled