Ensure ‘Minimum Lowercase Letters’ is greater than or equal to 1
Details This checks all new passwords to ensure that they contain at least one English lowercase character (a through z)....
- Home
- Security Hardening
- CIS Palo Alto Firewall 8 Benchmark L1 V1.0.0
CIS Palo Alto Firewall 8 Benchmark L1 V1.0.0
Ensure ‘Minimum Numeric Letters’ is greater than or equal to 1
Details This checks all new passwords to ensure that they contain at least one base 10 digit (0 through 9)....Ensure ‘Minimum Password Complexity’ is enabled
Details This checks all new passwords to ensure that they meet basic requirements for strong passwords. Rationale: Password complexity recommendations...Ensure ‘Minimum Special Characters’ is greater than or equal to 1
Details This checks all new passwords to ensure that they contain at least one non-alphabetic character (for example, !, $,...Ensure ‘Minimum Uppercase Letters’ is greater than or equal to 1
Details This checks all new passwords to ensure that they contain at least one English uppercase character (A through Z)....Ensure ‘New Password Differs By Characters’ is greater than or equal to 3
Details This checks all new passwords to ensure that they differ by at least three characters from the previous password....Ensure ‘Passive Link State’ and ‘Preemptive’ are configured appropriately – Election Setings
Details Set the Passive Link State to auto, and uncheck the Preemptive option to disable it. Rationale: Simultaneously enabling the...Ensure ‘Passive Link State’ and ‘Preemptive’ are configured appropriately – Passive Link State
Details Set the Passive Link State to auto, and uncheck the Preemptive option to disable it. Rationale: Simultaneously enabling the...Ensure ‘Password Profiles’ do not exist
Details Password profiles that are weaker than the recommended minimum password complexity settings must not exist. Rationale: As password profiles...Ensure ‘Permitted IP Addresses’ is set for all management profiles where SSH, HTTPS, or SNMP is enabled – SSH
Details For all management profiles, only the IP addresses required for device management should be specified. Rationale: If a Permitted...