Palo Alto Networks ALG Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
SRG-NET-000246-ALG-000132
Group -
The Palo Alto Networks security platform must update malicious code protection mechanisms and signature definitions whenever new releases are available in accordance with organizational configuration management policy and procedures.
In order to minimize any potential negative impact to the organization caused by malicious code, malicious code must be identified and eradicated. Malicious code includes viruses, worms, Trojan hor...Rule Medium Severity -
SRG-NET-000249-ALG-000134
Group -
SRG-NET-000249-ALG-000145
Group -
The Palo Alto Networks security platform must delete or quarantine malicious code in response to malicious code detection.
Taking an appropriate action based on local organizational incident handling procedures minimizes the impact of this code on the network. This requirement is limited to ALGs web content filters and...Rule Medium Severity -
SRG-NET-000249-ALG-000146
Group -
SRG-NET-000251-ALG-000131
Group -
SRG-NET-000288-ALG-000109
Group -
SRG-NET-000289-ALG-000110
Group -
The Palo Alto Networks security platform must prevent the download of prohibited mobile code.
MMobile code is defined as software modules obtained from remote systems, transferred across a network, and then downloaded and executed on a local system without explicit installation or execution...Rule Medium Severity -
SRG-NET-000313-ALG-000010
Group -
SRG-NET-000314-ALG-000013
Group -
SRG-NET-000318-ALG-000014
Group -
To protect against data mining, the Palo Alto Networks security platform must detect and prevent SQL and other code injection attacks launched against data storage objects, including, at a minimum, databases, database records, queries, and fields.
Data mining is the analysis of large quantities of data to discover patterns and is used in intelligence gathering. Failure to prevent attacks launched against organizational information from unaut...Rule Medium Severity -
SRG-NET-000318-ALG-000151
Group -
SRG-NET-000334-ALG-000050
Group -
The Palo Alto Networks security platform must off-load audit records onto a different system or media than the system being audited.
Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity. Th...Rule Medium Severity -
SRG-NET-000355-ALG-000117
Group -
SRG-NET-000362-ALG-000112
Group -
SRG-NET-000362-ALG-000126
Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.