Ensure 'WildFire Update Schedule' is set to download and install updates in real-time

高等級 1自動化paloalto

說明

Set the WildFire update schedule to download and install updates in real-time. PASS requires the WildFire update schedule recurring real-time. Audited against the PAN-OS running configuration in set format: run 'set cli config-output-format set', then 'configure' and 'show' (or 'show config running') and save the full output.

檢查方式

稽核方法: 設定正規表示式

比對模式: (?m)^set (?:template \S+ config )?deviceconfig system update-schedule wildfire recurring real-time[ \t]*$

修補方式

修補方法: 操作指南或基礎設施修補檔

configure set deviceconfig system update-schedule wildfire recurring real-time commit # CIS guidance: Navigate to Device > Dynamic Updates > WildFire Update Schedule. Set Recurrence is set to Real-time.

屬性

作業系統: 不限
標籤: paloaltotime
參考資料: CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 5.6 Ensure 'WildFire Update Schedule' is set to download and install updates in real-time

檢查此主機

請在您有權稽核的機器上執行此指令。掃描為唯讀操作。

shell

tmaegis scan --target paloalto