Home
Security Hardening
DISA STIG Palo Alto NDM V1R4

DISA STIG Palo Alto NDM V1R4

PANW-NM-000024 – The Palo Alto Networks security platform must generate audit records when successful/unsuccessful attempts to access privileges occur – System Logs ‘CRITICAL’
Details Without generating audit records that are specific to the security and mission needs of the organization, it would be...
PANW-NM-000024 – The Palo Alto Networks security platform must generate audit records when successful/unsuccessful attempts to access privileges occur – System Logs ‘HIGH’
Details Without generating audit records that are specific to the security and mission needs of the organization, it would be...
PANW-NM-000024 – The Palo Alto Networks security platform must generate audit records when successful/unsuccessful attempts to access privileges occur – System Logs ‘INFORMATIONAL’
Details Without generating audit records that are specific to the security and mission needs of the organization, it would be...
PANW-NM-000024 – The Palo Alto Networks security platform must generate audit records when successful/unsuccessful attempts to access privileges occur – System Logs ‘LOW’
Details Without generating audit records that are specific to the security and mission needs of the organization, it would be...
PANW-NM-000024 – The Palo Alto Networks security platform must generate audit records when successful/unsuccessful attempts to access privileges occur – System Logs ‘MEDIUM’
Details Without generating audit records that are specific to the security and mission needs of the organization, it would be...
PANW-NM-000029 – The Palo Alto Networks security platform must produce audit log records containing information (FQDN, unique hostname, management IP address) to establish the source of events – ‘Hostname’
Details In order to compile an accurate risk assessment and provide forensic analysis, it is essential for security personnel to...
PANW-NM-000063 – The Palo Alto Networks security platform must enforce a 60-day maximum password lifetime restriction.
Details Any password, no matter how complex, can eventually be cracked. Therefore, passwords need to be changed at specific intervals....
PANW-NM-000042 – The Palo Alto Networks security platform must back up audit records at least every seven days onto a different system or system component than the system or component being audited – ‘Log Forwarding’
Details Protection of log data includes assuring log data is not accidentally lost or deleted. Regularly forwarding logs to a...
PANW-NM-000069 – The Palo Alto Networks security platform must terminate management sessions after 10 minutes of inactivity except to fulfill documented and validated mission requirements.
Details Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take...
PANW-NM-000042 – The Palo Alto Networks security platform must back up audit records at least every seven days onto a different system or system component than the system or component being audited – ‘Log Settings Config’
Details Protection of log data includes assuring log data is not accidentally lost or deleted. Regularly forwarding logs to a...

Prev Next

DISA STIG Palo Alto NDM V1R4

PANW-NM-000024 – The Palo Alto Networks security platform must generate audit records when successful/unsuccessful attempts to access privileges occur – System Logs ‘CRITICAL’

PANW-NM-000024 – The Palo Alto Networks security platform must generate audit records when successful/unsuccessful attempts to access privileges occur – System Logs ‘HIGH’

PANW-NM-000024 – The Palo Alto Networks security platform must generate audit records when successful/unsuccessful attempts to access privileges occur – System Logs ‘INFORMATIONAL’

PANW-NM-000024 – The Palo Alto Networks security platform must generate audit records when successful/unsuccessful attempts to access privileges occur – System Logs ‘LOW’

PANW-NM-000024 – The Palo Alto Networks security platform must generate audit records when successful/unsuccessful attempts to access privileges occur – System Logs ‘MEDIUM’

PANW-NM-000029 – The Palo Alto Networks security platform must produce audit log records containing information (FQDN, unique hostname, management IP address) to establish the source of events – ‘Hostname’

PANW-NM-000063 – The Palo Alto Networks security platform must enforce a 60-day maximum password lifetime restriction.

PANW-NM-000042 – The Palo Alto Networks security platform must back up audit records at least every seven days onto a different system or system component than the system or component being audited – ‘Log Forwarding’

PANW-NM-000069 – The Palo Alto Networks security platform must terminate management sessions after 10 minutes of inactivity except to fulfill documented and validated mission requirements.

PANW-NM-000042 – The Palo Alto Networks security platform must back up audit records at least every seven days onto a different system or system component than the system or component being audited – ‘Log Settings Config’