TMA-PALOALTO-1.2.4
Ensure HTTP and Telnet options are disabled for all management profiles
Opis
HTTP and Telnet options should not be enabled for device management. FAILs if any interface management profile sets telnet yes or http yes. Audited against the PAN-OS running configuration in set format: run 'set cli config-output-format set', then 'configure' and 'show' (or 'show config running') and save the full output.
Kako se proverava
Metod provere: Obrazac konfiguracije
- Obrazac
(?m)^set (?:template \S+ config )?network profiles interface-management-profile (?:"[^"\n]*"|\S+) (?:telnet|http) yes[ \t]*$
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
configure set network profiles interface-management-profile <profile> telnet no set network profiles interface-management-profile <profile> http no commit # CIS guidance: Navigate to Network > Network Profiles > Interface Management. For each Profile, set the HTTP and Telnet boxes to unchecked.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- paloaltomanagement
- Referenca
- CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 1.2.4 Ensure HTTP and Telnet options are disabled for all management profiles
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
tmaegis scan --target paloalto