Ensure 'Permitted IP Addresses' is set for all management profiles where SSH, HTTPS, or SNMP is enabled

高级别 1人工审核paloalto

说明

For all management profiles, only the IP addresses required for device management should be specified.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Navigate to Network > Network Profiles > Interface Management. In each profile, for each of the target protocols (SNMP, HTTPS, SSH), verify that Permitted IP Addresses is limited to those necessary for device management.

修复方式

修复方法: 操作指南或基础设施补丁

Navigate to Network > Network Profiles > Interface Management. In each profile, for each of the target protocols (SNMP, HTTPS, SSH), set Permitted IP Addresses to only include those necessary for device management. If no profile exists, create one that has these options set.

属性

操作系统: 任意
标签: paloaltosnmp
参考: CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 1.2.2 Ensure 'Permitted IP Addresses' is set for all management profiles where SSH, HTTPS, or SNMP is enabled