CIS Palo Alto Firewall 6 Benchmark L1 V1.0.0

Details Configure an Authentication Profile with Failed Attempts and Lockout Time set to organization-defined values (for example, 3 failed attempts...

Details Set Applications and File Types fields to any in WildFire file blocking profiles. With a WildFire license, seven file...

Details Allow the firewall to forward decrypted content to WildFire. Note that SSL Forward-Proxy must also be enabled and configured...

Details Configure Link Monitoring and/or Path Monitoring under High Availability options. If Link Monitoring is utilized, all links critical to...

Details Configure Link Monitoring and/or Path Monitoring under High Availability options. If Link Monitoring is utilized, all links critical to...

Details Configure Link Monitoring and/or Path Monitoring under High Availability options. If Link Monitoring is utilized, all links critical to...

Details Configure Link Monitoring and/or Path Monitoring under High Availability options. If Link Monitoring is utilized, all links critical to...

Details HTTP and Telnet options should not be enabled for device management. Rationale: Management access over cleartext services such as...

Details Set the Idle Timeout value for device management to 10 minutes or less to automatically close inactive sessions. Rationale:...

Details Configure a login banner, ideally approved by the organization’s legal team. This banner should, at minimum, prohibit unauthorized access,...