TMA-PALOALTO-1.2.2
Ensure 'Permitted IP Addresses' is set for all management profiles where SSH, HTTPS, or SNMP is enabled
Opis
For all management profiles, only the IP addresses required for device management should be specified.
Kako se proverava
Metod provere: Ručni pregled
Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.
Navigate to Network > Network Profiles > Interface Management. In each profile, for each of the target protocols (SNMP, HTTPS, SSH), verify that Permitted IP Addresses is limited to those necessary for device management.
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Navigate to Network > Network Profiles > Interface Management. In each profile, for each of the target protocols (SNMP, HTTPS, SSH), set Permitted IP Addresses to only include those necessary for device management. If no profile exists, create one that has these options set.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- paloaltosnmp
- Referenca
- CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 1.2.2 Ensure 'Permitted IP Addresses' is set for all management profiles where SSH, HTTPS, or SNMP is enabled