DISA STIG Palo Alto ALG v2r2

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: DISA STIG Palo Alto ALG v2r2

Updated: 2/21/2023

Authority: DISA STIG

Plugin: Palo_Alto

Revision: 1.6

Estimated Item Count: 58

Audit Changelog

 
Revision 1.6

Feb 21, 2023

Miscellaneous
  • Audit deprecated.
  • Metadata updated.
  • References updated.
Revision 1.5

Oct 25, 2022

Functional Update
  • PANW-AG-000062 - The Palo Alto Networks security platform must drop malicious code upon detection - Antivirus Profiles.
  • PANW-AG-000062 - The Palo Alto Networks security platform must drop malicious code upon detection - Antivirus Services.
  • PANW-AG-000063 - The Palo Alto Networks security platform must delete or quarantine malicious code in response to malicious code detection - Antivirus Profiles
  • PANW-AG-000063 - The Palo Alto Networks security platform must delete or quarantine malicious code in response to malicious code detection - Antivirus Services
  • PANW-AG-000073 - The Palo Alto Networks security platform must deny or restrict detected prohibited mobile code - Antivirus Actions
  • PANW-AG-000073 - The Palo Alto Networks security platform must deny or restrict detected prohibited mobile code - Antivirus Policies
  • PANW-AG-000074 - The Palo Alto Networks security platform must prevent the download of prohibited mobile code - Antivirus Profiles
  • PANW-AG-000074 - The Palo Alto Networks security platform must prevent the download of prohibited mobile code - Antivirus Protocols
Revision 1.4

Jun 10, 2022

Miscellaneous
  • Metadata updated.
  • References updated.
  • See also link updated.
Revision 1.3

May 23, 2022

Added
  • PANW-AG-000144 - The Palo Alto Networks security platform must, at a minimum, off-load threat and traffic log records onto a centralized log server in real time - Threat Logs
  • PANW-AG-000144 - The Palo Alto Networks security platform must, at a minimum, off-load threat and traffic log records onto a centralized log server in real time - Traffic Logs
Removed
  • PANW-AG-000094 - The Palo Alto Networks security platform must off-load audit records onto a different system or media than the system being audited - Config Logs
  • PANW-AG-000094 - The Palo Alto Networks security platform must off-load audit records onto a different system or media than the system being audited - Log Forwarding
  • PANW-AG-000094 - The Palo Alto Networks security platform must off-load audit records onto a different system or media than the system being audited - System Logs
  • PANW-AG-000144 - The Palo Alto Networks security platform must, at a minimum, off-load threat and traffic log records onto a centralized log server in real time - Config Logs
  • PANW-AG-000144 - The Palo Alto Networks security platform must, at a minimum, off-load threat and traffic log records onto a centralized log server in real time - Log Forwarding
  • PANW-AG-000144 - The Palo Alto Networks security platform must, at a minimum, off-load threat and traffic log records onto a centralized log server in real time - System Logs
Revision 1.2

Apr 25, 2022

Miscellaneous
  • References updated.
Revision 1.1

Mar 21, 2022

Functional Update
  • PANW-AG-000063 - The Palo Alto Networks security platform must delete or quarantine malicious code in response to malicious code detection - Antivirus Profiles
Miscellaneous
  • Metadata updated.