Ensure forwarding of decrypted content to WildFire is enabled
Details Allow the firewall to forward decrypted content to WildFire. Note that SSL Forward-Proxy must also be enabled and configured...
- Home
- Security Hardening
- CIS Palo Alto Firewall 8 Benchmark L1 V1.0.0
CIS Palo Alto Firewall 8 Benchmark L1 V1.0.0
Ensure ‘High Availability’ requires Link Monitoring and/or Path Monitoring
Details Configure Link Monitoring and/or Path Monitoring under High Availability options. If Link Monitoring is utilized, all links critical to...Ensure ‘High Availability’ requires Link Monitoring and/or Path Monitoring – Link Monitoring Failure Condition
Details Configure Link Monitoring and/or Path Monitoring under High Availability options. If Link Monitoring is utilized, all links critical to...Ensure ‘High Availability’ requires Link Monitoring and/or Path Monitoring – Path Monitoring Failure Condition
Details Configure Link Monitoring and/or Path Monitoring under High Availability options. If Link Monitoring is utilized, all links critical to...Ensure HTTP and Telnet options are disabled for all management profiles – HTTP
Details HTTP and Telnet options should not be enabled for device management. Rationale: Management access over cleartext services such as...Ensure HTTP and Telnet options are disabled for all management profiles – Telnet
Details HTTP and Telnet options should not be enabled for device management. Rationale: Management access over cleartext services such as...Ensure HTTP and Telnet options are disabled for the management interface
Details HTTP and Telnet options should not be enabled for device management. Rationale: Management access over cleartext services such as...Ensure ‘Idle timeout’ is less than or equal to 10 minutes for device management
Details Set the Idle Timeout value for device management to 10 minutes or less to automatically close inactive sessions. Rationale:...Ensure ‘Login Banner’ is set
Details Configure a login banner, ideally approved by the organizations legal team. This banner should, at minimum, prohibit unauthorized access,...Ensure ‘Minimum Length’ is greater than or equal to 12
Details This determines the least number of characters that make up a password for a user account. Rationale: A longer...