CIS Palo Alto Firewall 6 Benchmark L1 V1.0.0

Details For all management profiles, only the IP addresses required for device management should be specified. Rationale: If a Permitted...

Details For all management profiles, only the IP addresses required for device management should be specified. Rationale: If a Permitted...

Details Permit only the necessary IP addresses to be used to manage the device. Rationale: Management access to the device...

Details For all management profiles, only the IP addresses required for device management should be specified. Rationale: If a Permitted...

Details This determines the number of unique passwords that have to be most recently used for a user account before...

Details These settings enable use of primary and secondary NTP servers to provide redundancy in case of a failure involving...

Details Restrict the User-ID service account’s ability to gain remote access into the organization. This capability could be made available...

Details This defines how long a user can use a password before it expires. Rationale: The longer a password exists,...

Details If User-ID is configured, use the Include/Exclude Networks section to limit the User-ID scope to operate only on trusted...

Details Create security policies to deny Palo Alto User-ID traffic originating from the interface configured for the UID Agent service...