Ensure a fully-synchronized High Availability peer is configured
Details Ensure a High Availability peer is fully synchronized and in a passive or active state. Rationale: To ensure availability...
- Home
- Security Hardening
- CIS Palo Alto Firewall 8 Benchmark L1 V1.0.0
CIS Palo Alto Firewall 8 Benchmark L1 V1.0.0
Ensure alerts are enabled for malicious files detected by WildFire – log-type ‘wildfire’
Details Configure WildFire to send an alert when a malicious or greyware file is detected. This alert could be sent...Ensure all WildFire session information settings are enabled
Details Enable all options under Session Information Settings for WildFire. Rationale: Permitting the firewall to send all of this information...Ensure ‘Antivirus Update Schedule’ is set to download and install updates hourly
Details Set Antivirus Update Schedule to download and install updates hourly. Rationale: New antivirus definitions may be released at any...Ensure ‘Applications and Threats Update Schedule’ is set to download and install updates at daily or shorter intervals
Details Set the Applications and Threats Update Schedule to download and install updates at daily or shorter intervals. Rationale: New...Ensure a WildFire Analysis profile is enabled for all security policies
Details Ensure that all files traversing the firewall are inspected by WildFire by setting a Wildfire file blocking profile on...Ensure ‘Enable Log on High DP Load’ is enabled
Details Enable the option ‘Enable Log on High DP Load’ feature. When this option is selected, a system log entry...Ensure ‘Failed Attempts’ and ‘Lockout Time’ for Authentication Profile are properly configured – Failed Attempts
Details Configure values for Failed Login Attempts and Account Lockout Time set to organization-defined values (for example, 3 failed attempts...Ensure ‘Failed Attempts’ and ‘Lockout Time’ for Authentication Profile are properly configured – Lockout Time
Details Configure values for Failed Login Attempts and Account Lockout Time set to organization-defined values (for example, 3 failed attempts...Ensure forwarding is enabled for all applications and file types in WildFire file blocking profiles
Details Set Applications and File Types fields to any in WildFire file blocking profiles. With a WildFire license, seven file...