Ensure a fully-synchronized High Availability peer is configured
Details Ensure a High Availability peer is fully synchronized and in a passive or active state. Rationale: To ensure availability...
- Home
- Security Hardening
- CIS Palo Alto Firewall 9 Benchmark V1.0.0 L1
CIS Palo Alto Firewall 9 Benchmark V1.0.0 L1
Ensure ‘Antivirus Update Schedule’ is set to download and install updates hourly
Details Set Antivirus Update Schedule to download and install updates hourly. Rationale: New antivirus definitions may be released at any...Ensure ‘Applications and Threats Update Schedule’ is set to download and install updates at daily or shorter intervals
Details Set the Applications and Threats Update Schedule to download and install updates at daily or shorter intervals. Rationale: New...Ensure a WildFire Analysis profile is enabled for all security policies
Details Ensure that all files traversing the firewall are inspected by WildFire by setting a Wildfire file blocking profile on...Ensure ‘Enable Log on High DP Load’ is enabled
Details Enable the option ‘Enable Log on High DP Load’ feature. When this option is selected, a system log entry...Ensure ‘Failed Attempts’ and ‘Lockout Time’ for Authentication Profile are properly configured – Failed Attempts
Details Configure values for Failed Login Attempts and Account Lockout Time set to organization-defined values (for example, 3 failed attempts...Ensure ‘Failed Attempts’ and ‘Lockout Time’ for Authentication Profile are properly configured – Lockout Time
Details Configure values for Failed Login Attempts and Account Lockout Time set to organization-defined values (for example, 3 failed attempts...Ensure forwarding is enabled for all applications and file types in WildFire file blocking profiles
Details Set Applications and File Types fields to any in WildFire file blocking profiles. With a WildFire license, seven file...Ensure ‘High Availability’ requires Link Monitoring and/or Path Monitoring – Link Monitoring Failure Condition
Details Configure Link Monitoring and/or Path Monitoring under High Availability options. If Link Monitoring is utilized, all links critical to...Ensure ‘High Availability’ requires Link Monitoring and/or Path Monitoring – Path Monitoring Failure Condition
Details Configure Link Monitoring and/or Path Monitoring under High Availability options. If Link Monitoring is utilized, all links critical to...