Revision 1.3

May 6, 2021
Functional Update
  • 3.1 Ensure a fully-synchronized High Availability peer is configured
  • 3.3 Ensure 'Passive Link State' and 'Preemptive' are configured appropriately - Election Setings
  • 6.1 Ensure that antivirus profiles are set to block on all decoders except 'imap' and 'pop3'
Miscellaneous
  • Platform check updated.
  • References updated.
Added
  • CIS_Palo_Alto_Firewall_9_Benchmark_v1.0.0_L1.audit from CIS Palo Alto Firewall 9 Benchmark v1.0.0
Removed
  • 3.2 Ensure 'High Availability' requires Link Monitoring and/or Path Monitoring