U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

CIS Palo Alto Firewall 9 Benchmark 1.1.0 Checklist Details (Checklist Revisions)

Supporting Resources:

Target:

Target CPE Name
Palo Alto Networks PAN-OS 9.0.0 cpe:/o:paloaltonetworks:pan-os:9.0.0 (View CVEs)

Checklist Highlights

Checklist Name:
CIS Palo Alto Firewall 9 Benchmark
Checklist ID:
1209
Version:
1.1.0
Type:
Compliance
Review Status:
Final
Authority:
Third Party: Center for Internet Security (CIS)
Original Publication Date:
05/31/2023

Checklist Summary:

This is the final release of the CIS Benchmark for Palo Alto PANOS 9. CIS encourages you to migrate to a more recent, supported version of this technology. This document provides prescriptive guidance for establishing a secure configuration posture for Palo Alto Firewalls running PAN-OS version 9.x. This guide was tested against PAN-OS v9.x. To obtain the latest version of this guide, please visit http://benchmarks.cisecurity.org. If you have questions, comments, or have identified ways to improve this guide, please write us at feedback@cisecurity.org.

Checklist Role:

  • Enterprise Firewall

Known Issues:

Not provided.

Target Audience:

This benchmark is intended for system and application administrators, security specialists, auditors, help desk, and platform deployment personnel who plan to develop, deploy, assess, or secure solutions that incorporate PAN-OS on a Palo Alto Firewall

Target Operational Environment:

  • Managed
  • Specialized Security-Limited Functionality (SSLF)

Testing Information:

Not provided.

Regulatory Compliance:

Not provided.

Comments/Warnings/Miscellaneous:

Not provided.

Disclaimer:

Not provided.

Product Support:

Not provided.

Point of Contact:

feedback@cisecurity.org

Sponsor:

Not provided.

Licensing:

Not provided.

Change History:

new checklist - 3/1/24
Candidate to Final - 4/30/24

Dependency/Requirements:

URL Description

References:

Reference URL Description

NIST checklist record last modified on 04/30/2024