STIGQter: STIG Summary: Palo Alto Networks NDM Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 24 Jan 2020:

The Palo Alto Networks security platform must have alarms enabled.

DISA Rule

SV-77241r1_rule

Vulnerability Number

V-62751

Group Title

SRG-APP-000360-NDM-000295

Rule Version

PANW-NM-000097

Severity

CAT III

CCI(s)

• CCI-001858 - The information system provides a real-time alert in an organization-defined real-time period to organization-defined personnel, roles, and/or locations when organization-defined audit failure events requiring real-time alerts occur.

Weight

10

Fix Recommendation

Go to Device >> Log Settings >> Alarms
Select the "Edit" icon (the gear symbol in the upper-right corner of the pane).
In the "Alarm Settings" window; select the "Enable Alarms" box.
Select "OK".
Commit changes by selecting "Commit" in the upper-right corner of the screen.
Select "OK" when the confirmation dialog appears.

Check Contents

Go to Device >> Log Settings >> Alarms
If the "Enable Alarms" box is not checked, this is a finding.

Vulnerability Number

V-62751

Documentable

False

Rule Version

PANW-NM-000097

Severity Override Guidance

Go to Device >> Log Settings >> Alarms
If the "Enable Alarms" box is not checked, this is a finding.

Check Content Reference

M

Target Key

2811

Comments