TMA-PALOALTO-6.7
Ensure a secure Vulnerability Protection Profile is applied to all security rules allowing traffic
Opis
For any security rule allowing traffic, apply a securely configured Vulnerability Protection Profile. Careful analysis of the target environment should be performed before implementing this configuration, as outlined by PAN's "Threat Prevention Deployment Tech Note" in the references section.
Kako se proverava
Metod provere: Ručni pregled
Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.
Navigate to Policies > Security. For each Policy, under the Actions tab, select Vulnerability Protection. Verify either the 'Strict' or the 'Default' profile is selected, or a custom profile that complies with the organization's policies, legal and regulatory requirements.
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Navigate to Policies > Security. For each Policy, under the Actions tab, select Vulnerability Protection. Set it to use either the 'Strict' or the 'Default' profile, or a custom profile that complies with the organization's policies, legal and regulatory requirements.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- paloaltothreat-prevention
- Referenca
- CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 6.7 Ensure a secure Vulnerability Protection Profile is applied to all security rules allowing traffic