1.1.2 Ensure 'Enable Log on High DP Load' is enabled

Information

Enable the option 'Enable Log on High DP Load' feature. When this option is selected, a system log entry is created when the device's packet processing load reaches 100% utilization.
Rationale:
When the device's packet processing load reaches 100%, a degradation in the availability of services accessed through the device can occur. Logging this event can help with troubleshooting system performance.

Solution

Navigate to Device > Setup > Management > Logging and Reporting Settings > Log Export and Reporting.
Set the Enable Log on High DP Load box to checked.
Default Value:
Not enabled

See Also

https://workbench.cisecurity.org/files/1664

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12c.

Plugin: Palo_Alto

Control ID: b3e7e7ecf663f6fa3a21e34750716de448a1a622d41389c5006df6dc77547f9b