STIGQter: STIG Summary: Palo Alto Networks NDM Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 24 Jan 2020:

The Palo Alto Networks security platform must generate an audit log record when the Data Plane CPU utilization is 100%.

DISA Rule

SV-77273r1_rule

Vulnerability Number

V-62783

Group Title

SRG-APP-000516-NDM-000334

Rule Version

PANW-NM-000144

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Go to Device >> Setup >> Management
In the "Logging and Reporting Settings" pane, select the "Edit" icon (the gear symbol in the upper-right corner of the pane).
In the "Log Export and Reporting" tab, select the "Enable Log on High DP Load" check box.
Select "OK".
Commit changes by selecting "Commit" in the upper-right corner of the screen.
Select "OK" when the confirmation dialog appears.

Check Contents

Go to Device >> Setup >> Management
In the "Logging and Reporting Settings" pane.
If the "Enable Log on High DP Load" check box is not selected, this is a finding.

Vulnerability Number

V-62783

Documentable

False

Rule Version

PANW-NM-000144

Severity Override Guidance

Go to Device >> Setup >> Management
In the "Logging and Reporting Settings" pane.
If the "Enable Log on High DP Load" check box is not selected, this is a finding.

Check Content Reference

M

Target Key

2811

Comments