Rule explorer
Browse every hardening rule in the catalogue. Filter by platform, severity, profile level and whether the check can be automated.
81 rules foundof 8,597Page 1 of 4
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-PALOALTO-1.1.1.2 | SNMPv3 traps should be configuredpaloalto · Level 2 | paloalto | High | 2 | Automated |
| TMA-PALOALTO-1.2.1 | Ensure 'Permitted IP Addresses' is set to those necessary for device managementpaloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-1.2.2 | Ensure 'Permitted IP Addresses' is set for all management profiles where SSH, HTTPS, or SNMP is enabledpaloalto · Level 1 | paloalto | High | 1 | Manual review |
| TMA-PALOALTO-1.2.3 | Ensure HTTP and Telnet options are disabled for the management interfacepaloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-1.2.4 | Ensure HTTP and Telnet options are disabled for all management profilespaloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-1.3.1 | Ensure 'Minimum Password Complexity' is enabledpaloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-1.3.7 | Ensure 'Required Password Change Period' is less than or equal to 90 dayspaloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-1.3.8 | Ensure 'New Password Differs By Characters' is greater than or equal to 3paloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-1.3.9 | Ensure 'Prevent Password Reuse Limit' is set to 24 or more passwordspaloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-1.3.10 | Ensure 'Password Profiles' do not existpaloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-1.4.2 | Ensure 'Failed Attempts' and 'Lockout Time' for Authentication Profile are properly configuredpaloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-1.6.1 | Ensure 'Verify Update Server Identity' is enabledpaloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-4.1 | Ensure 'Antivirus Update Schedule' is set to download and install updates hourlypaloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-4.2 | Ensure 'Applications and Threats Update Schedule' is set to download and install updates at daily or shorter intervalspaloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-5.1 | Ensure that WildFire file size upload limits are maximizedpaloalto · Level 1 | paloalto | High | 1 | Manual review |
| TMA-PALOALTO-5.2 | Ensure a WildFire Analysis profile is enabled for all security policiespaloalto · Level 1 | paloalto | High | 1 | Manual review |
| TMA-PALOALTO-5.3 | Ensure forwarding of decrypted content to WildFire is enabledpaloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-5.4 | Ensure all WildFire session information settings are enabledpaloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-5.5 | Ensure alerts are enabled for malicious files detected by WildFirepaloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-5.6 | Ensure 'WildFire Update Schedule' is set to download and install updates in real-timepaloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-5.7 | Choosing Wildfire public cloud regionpaloalto · Level 2 | paloalto | High | 2 | Manual review |
| TMA-PALOALTO-5.8 | Ensure that 'Inline Cloud Analysis' on Wildfire profiles is enabledpaloalto · Level 1 | paloalto | High | 1 | Manual review |
| TMA-PALOALTO-6.1 | Ensure that antivirus profiles are set to reset-both on all decoders except 'imap' and 'pop3'paloalto · Level 1 | paloalto | High | 1 | Automated |
| TMA-PALOALTO-6.2 | Ensure a secure antivirus profile is applied to all relevant security policiespaloalto · Level 1 | paloalto | High | 1 | Manual review |
| TMA-PALOALTO-6.3 | Ensure an anti-spyware profile is configured to block on specified spyware severity levels, categories, and threatspaloalto · Level 1 | paloalto | High | 1 | Automated |