Revision 1.3May 6, 2021
Functional Update
- 3.1 Ensure a fully-synchronized High Availability peer is configured
- 3.3 Ensure 'Passive Link State' and 'Preemptive' are configured appropriately - Election Setings
- 6.1 Ensure that antivirus profiles are set to block on all decoders except 'imap' and 'pop3'
Miscellaneous
- Platform check updated.
- References updated.
Added
- CIS_Palo_Alto_Firewall_9_Benchmark_v1.0.0_L1.audit from CIS Palo Alto Firewall 9 Benchmark v1.0.0
Removed
- 3.2 Ensure 'High Availability' requires Link Monitoring and/or Path Monitoring