Ensure HTTP and Telnet options are disabled for all management profiles – HTTP
Details HTTP and Telnet options should not be enabled for device management. Rationale: Management access over cleartext services such as...
- Home
- Security Hardening
- CIS Palo Alto Firewall 9 Benchmark V1.0.0 L1
CIS Palo Alto Firewall 9 Benchmark V1.0.0 L1
Ensure HTTP and Telnet options are disabled for all management profiles – Telnet
Details HTTP and Telnet options should not be enabled for device management. Rationale: Management access over cleartext services such as...Ensure HTTP and Telnet options are disabled for the management interface
Details HTTP and Telnet options should not be enabled for device management. Rationale: Management access over cleartext services such as...Ensure ‘Idle timeout’ is less than or equal to 10 minutes for device management
Details Set the Idle Timeout value for device management to 10 minutes or less to automatically close inactive sessions. Rationale:...Ensure ‘Login Banner’ is set
Details Configure a login banner, ideally approved by the organization’s legal team. This banner should, at minimum, prohibit unauthorized access,...Ensure ‘Minimum Length’ is greater than or equal to 12
Details This determines the least number of characters that make up a password for a user account. Rationale: A longer...Ensure ‘Minimum Lowercase Letters’ is greater than or equal to 1
Details This checks all new passwords to ensure that they contain at least one English lowercase character (a through z)....Ensure ‘Minimum Numeric Letters’ is greater than or equal to 1
Details This checks all new passwords to ensure that they contain at least one base 10 digit (0 through 9)....Ensure ‘Minimum Password Complexity’ is enabled
Details This checks all new passwords to ensure that they meet basic requirements for strong passwords. Rationale: Password complexity recommendations...Ensure ‘Minimum Special Characters’ is greater than or equal to 1
Details This checks all new passwords to ensure that they contain at least one non-alphabetic character (for example,!, $, #,...