Ensure a secure Data Filtering profile is applied to all security policies allowing traffic to or from the Internet

Trung bìnhCấp 1Xem xét thủ côngpaloalto

Mô tả

Create a secure Data Filtering profile and apply it to all security policies permitting traffic to or from the Internet. The Data Filtering profile may be applied to security policies directly or through a profile group.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

Navigate to Objects > Custom Objects > Data Patterns. Verify that the patterns defined match the various data that you wish to monitor or make blocking decisions on. Navigate to Objects > Security Profiles > Data Filtering For each Filtering Profile, verify that the Data Patterns defined matches the data you wish to monitor, with appropriate values for Alert Threshold (typically 20), Block Threshold (typically 0) and Log Severity. Finally, navigate to Policies > Security. (Full steps: CIS 6.14.)

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

Navigate to Objects > Custom Objects > Data Patterns. Add patterns to match the various data that you wish to monitor or make blocking decisions on. Navigate to Objects > Security Profiles > Data Filtering Add a Filtering Profile that matches the data you wish to monitor, with appropriate values for Alert Threshold (typically 20), Block Threshold (typically 0) and Log Serverity Finally, apply the Filtering Profile to a Security Profile. Navigate to Policies > Security. Edit all appropriate policies, and for each Policy choose the Actions tab, and add the appropriate Data Filtering Policy (either as an individual Profile or as part of a Group Profile)

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: paloaltothreat-prevention
Tham chiếu: CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 6.14 Ensure a secure Data Filtering profile is applied to all security policies allowing traffic to or from the Internet