CIS_Palo_Alto_Firewall_8_Benchmark_L2_v1.0.0.audit from CIS Palo Alto Firewall 8 Benchmark v1.0.0
Details This audit checks the testable Level 2 guidance in the CIS Palo Alto Firewall 8 benchmark document. Supportive Information...
- Home
- Security Hardening
- CIS Palo Alto Firewall 8 Benchmark L2 V1.0.0
CIS Palo Alto Firewall 8 Benchmark L2 V1.0.0
Ensure application security policies exist when allowing traffic from an untrusted zone to a more trusted zone
Details When permitting traffic from an untrusted zone, such as the Internet or guest network, to a more trusted zone,...Ensure that a Zone Prot Profile with tuned Flood Protection settings enabled
Details 6.17 Ensure that a Zone Protection Profile with tuned Flood Protection settings enabled for all flood types is attached...Ensure that IP addresses are mapped to usernames – User ID Agents
Details Configure appropriate settings to map IP addresses to usernames. Mapping userids to IP addresses is what permits the firewall...Ensure that IP addresses are mapped to usernames – Zones
Details Configure appropriate settings to map IP addresses to usernames. Mapping userids to IP addresses is what permits the firewall...Ensure that the certificate securing Remote Access VPNs is valid – Certificates
Details The Certificate used to secure Remote Access VPNs should satisfy the following criteria: It should be a valid certificate...Ensure that the certificate securing Remote Access VPNs is valid – GlobalProtect Gateways
Details The Certificate used to secure Remote Access VPNs should satisfy the following criteria: It should be a valid certificate...Ensure that the certificate securing Remote Access VPNs is valid – GlobalProtect Portals
Details The Certificate used to secure Remote Access VPNs should satisfy the following criteria: It should be a valid certificate...Ensure that the Certificate used for Decryption is Trusted
Details The CA Certificate used for in-line HTTP Man in the Middle should be trusted by target users. There are...Ensure that WMI probing is disabled
Details Disable WMI probing if it is not required for User-ID functionality in the environment. Rationale: WMI probing normally requires...