Home
Security Hardening
DISA STIG Palo Alto Alg V2R2

DISA STIG Palo Alto Alg V2R2

PANW-AG-000063 – The Palo Alto Networks security platform must delete or quarantine malicious code in response to malicious code detection – Antivirus Services
Details Taking an appropriate action based on local organizational incident handling procedures minimizes the impact of this code on the...
PANW-AG-000024 – The Palo Alto Networks security platform must log violations of security policies.
Details Without establishing the source of the event, it is impossible to establish, correlate, and investigate the events leading up...
PANW-AG-000064 – The Palo Alto Networks security platform must send an immediate (within seconds) alert to the system administrator, at a minimum, in response to malicious code detection – Email Log Forwarding
Details Without an alert, security personnel may be unaware of an impending failure of the audit capability; then the ability...
PANW-AG-000035 – The Palo Alto Networks security platform must only enable User-ID on trusted zones.
Details User-ID can use Windows Management Instrumentation (WMI) probing as a method of mapping users to IP addresses. If this...
PANW-AG-000064 – The Palo Alto Networks security platform must send an immediate (within seconds) alert to the system administrator, at a minimum, in response to malicious code detection – Email Servers
Details Without an alert, security personnel may be unaware of an impending failure of the audit capability; then the ability...
PANW-AG-000036 – The Palo Alto Networks security platform must disable WMI probing if it is not used.
Details User-ID can use Windows Management Instrumentation (WMI) probing as a method of mapping users to IP addresses. If this...
PANW-AG-000065 – The Palo Alto Networks security platform must automatically update malicious code protection mechanisms – Download Action
Details Remote access is access to DoD nonpublic information systems by an authorized user (or an information system) communicating through...
PANW-AG-000037 – The Palo Alto Networks security platform must not enable the DNS proxy.
Details The Palo Alto Networks security platform can act as a DNS proxy and send the DNS queries on behalf...
PANW-AG-000065 – The Palo Alto Networks security platform must automatically update malicious code protection mechanisms – Schedule
Details Remote access is access to DoD nonpublic information systems by an authorized user (or an information system) communicating through...
PANW-AG-000038 – The Palo Alto Networks security platform must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.
Details In order to prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e., embedding of data...

Prev Next

DISA STIG Palo Alto Alg V2R2

PANW-AG-000063 – The Palo Alto Networks security platform must delete or quarantine malicious code in response to malicious code detection – Antivirus Services

PANW-AG-000024 – The Palo Alto Networks security platform must log violations of security policies.

PANW-AG-000064 – The Palo Alto Networks security platform must send an immediate (within seconds) alert to the system administrator, at a minimum, in response to malicious code detection – Email Log Forwarding

PANW-AG-000035 – The Palo Alto Networks security platform must only enable User-ID on trusted zones.

PANW-AG-000064 – The Palo Alto Networks security platform must send an immediate (within seconds) alert to the system administrator, at a minimum, in response to malicious code detection – Email Servers

PANW-AG-000036 – The Palo Alto Networks security platform must disable WMI probing if it is not used.

PANW-AG-000065 – The Palo Alto Networks security platform must automatically update malicious code protection mechanisms – Download Action

PANW-AG-000037 – The Palo Alto Networks security platform must not enable the DNS proxy.

PANW-AG-000065 – The Palo Alto Networks security platform must automatically update malicious code protection mechanisms – Schedule

PANW-AG-000038 – The Palo Alto Networks security platform must be configured to prohibit or restrict the use of functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.