Ensure that logging is enabled on built-in default security policies

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac

(?m)(?:^set (?:shared |vsys \S+ |device-group \S+ |template \S+ config (?:shared |vsys \S+ )?)?rulebase default-security-rules rules interzone-default log-end yes[ \t]*$(?s:.*?)^set (?:shared |vsys \S+ |device-group \S+ |template \S+ config (?:shared |vsys \S+ )?)?rulebase default-security-rules rules intrazone-default log-end yes[ \t]*$|^set (?:shared |vsys \S+ |device-group \S+ |template \S+ config (?:shared |vsys \S+ )?)?rulebase default-security-rules rules intrazone-default log-end yes[ \t]*$(?s:.*?)^set (?:shared |vsys \S+ |device-group \S+ |template \S+ config (?:shared |vsys \S+ )?)?rulebase default-security-rules rules interzone-default log-end yes[ \t]*$)

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

configure set rulebase default-security-rules rules interzone-default log-end yes set rulebase default-security-rules rules intrazone-default log-end yes commit # CIS guidance: Navigate to Policies > Security Go to default policies intrazone-default and interzone-default. On Actions tab, enable Log at Session End on log setting.

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

tmaegis scan --target paloalto