Ensure a secure antivirus profile is applied to all relevant security policies

高等級 1人工審核paloalto

說明

Create a secure antivirus profile and apply it to all security policies that could pass HTTP, SMTP, IMAP, POP3, FTP, or SMB traffic. The antivirus profile may be applied to the security policies directly or through a profile group.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

Navigate to Policies > Security . For each policy, navigate to [Policy Name] > Actions Verify there is a secure Antivirus profile applied to all security policies passing traffic - regardless of protocol. This can be set by Profiles or by Profile Group.

修補方式

修補方法: 操作指南或基礎設施修補檔

Navigate to Policies > Security . For each policy, navigate to [Policy Name] > Actions Set an Antivirus profile or a Profile Group containing an AV profile for each security policy passing traffic - regardless of protocol.

屬性

作業系統: 不限
標籤: paloaltothreat-prevention
參考資料: CIS Palo Alto Firewall 11 Benchmark v1.2.0 - 6.2 Ensure a secure antivirus profile is applied to all relevant security policies