Ensure that 'Inline Cloud Analysis' on Wildfire profiles is enabled

高等級 1人工審核paloalto

說明

Enable 'Advanced WildFire Inline Cloud Analysis' on Wildfire profiles and forward PE files for analysis. Palo Alto Networks Advanced WildFire operates a series of cloud- based ML detection engines that provide inline analysis of PE (portable executable) files traversing your network to detect and prevent advanced malware in real-time.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

Navigate to Objects > Security Profiles > Wildfire Verify that Wildfire profiles has Enable cloud inline analysis checked. On Inline cloud analysis tab, verify that there is a rule to forward files with the following settings: Application set to Any File Type set to PE Direction set to Both Action set to Block

修補方式

修補方法: 操作指南或基礎設施修補檔

Navigate to Objects > Security Profiles > Wildfire On relevant Wildfire profile, checked Enable cloud inline analysis box. On Inline cloud analysis tab, configure a rule to forward files with the following settings: Application set to Any File Type set to PE Direction set to Both Action set to Block

屬性

作業系統: 不限
標籤: paloaltothreat-prevention
參考資料: CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 5.8 Ensure that 'Inline Cloud Analysis' on Wildfire profiles is enabled