CIS Palo Alto Firewall 10 v1.1.0 L2

This audit file has been deprecated and will be removed in a future update.

Name: CIS Palo Alto Firewall 10 v1.1.0 L2

Updated: 10/2/2024

Authority: CIS

Plugin: Palo_Alto

Revision: 1.3

Estimated Item Count: 16

Filename: CIS_Palo_Alto_Firewall_10_Benchmark_v1.1.0_L2.audit

Size: 134 kB

MD5: 3069347e16cd264ba8f4cde4d15d8ad5

SHA256: 1584bc9bb2ff735ac8f712e1338ea8692b3d86b0529811905f1bc242655c23d9

Description	Categories
1.1.1.2 SNMPv3 traps should be configured - configuration
1.1.1.2 SNMPv3 traps should be configured - hip match
1.1.1.2 SNMPv3 traps should be configured - host
1.1.1.2 SNMPv3 traps should be configured - ip-tag
1.1.1.2 SNMPv3 traps should be configured - user-id
1.2.5 Ensure valid certificate is set for browser-based administrator interface
1.6.3 Ensure that the Certificate Securing Remote Access VPNs is Valid - Certificates
1.6.3 Ensure that the Certificate Securing Remote Access VPNs is Valid - GlobalProtect Gateways
1.6.3 Ensure that the Certificate Securing Remote Access VPNs is Valid - GlobalProtect Portals
2.1 Ensure that IP addresses are mapped to usernames - User ID Agents
2.1 Ensure that IP addresses are mapped to usernames - Zones
2.2 Ensure that WMI probing is disabled
6.16 Ensure that a Zone Protection Profile with tuned Flood Protection settings enabled for all flood types is attached to all untrusted zones
7.1 Ensure application security policies exist when allowing traffic from an untrusted zone to a more trusted zone
8.3 Ensure that the Certificate used for Decryption is Trusted
CIS_Palo_Alto_Firewall_10_Benchmark_v1.1.0_L2.audit from CIS Palo Alto Firewall 10 Benchmark v1.1.0