https://live.paloaltonetworks.com/t5/general-topics/hardening-guide-for-pan-ngfw-and-global-protect/m-p/1066187#M122860 <P>For compliance reasons, specifically StateRAMP (and likely FedRAMP in the distant future), I'm looking for any hardening guides or STIG for the PAN NG-FW and Global Protect or even general best practices.&nbsp; &nbsp;I feel odd asking for "security hardening" for a security solution, but I'm just making sure all bases are covered.&nbsp;</P> <P>&nbsp;</P> <P>I've found a couple things, but I'm wondering if there's anything else.</P> <P>&nbsp;</P> <P>Config hardening guide:&nbsp;<A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIaCAK" target="_blank">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIaCAK</A></P> <P>&nbsp;</P> <P><A href="https://ncp.nist.gov/repository?sortBy=modifiedDate%7Cdesc&amp;keyword=palo+alto" target="_blank">https://ncp.nist.gov/repository?sortBy=modifiedDate%7Cdesc&amp;keyword=palo+alto</A></P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> Mon, 13 Jan 2025 18:37:03 GMT malmgren 2025-01-13T18:37:03Z https://live.paloaltonetworks.com/t5/general-topics/hardening-guide-for-pan-ngfw-and-global-protect/m-p/1066187#M122860 <P>For compliance reasons, specifically StateRAMP (and likely FedRAMP in the distant future), I'm looking for any hardening guides or STIG for the PAN NG-FW and Global Protect or even general best practices.&nbsp; &nbsp;I feel odd asking for "security hardening" for a security solution, but I'm just making sure all bases are covered.&nbsp;</P> <P>&nbsp;</P> <P>I've found a couple things, but I'm wondering if there's anything else.</P> <P>&nbsp;</P> <P>Config hardening guide:&nbsp;<A href="https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIaCAK" target="_blank">https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIaCAK</A></P> <P>&nbsp;</P> <P><A href="https://ncp.nist.gov/repository?sortBy=modifiedDate%7Cdesc&amp;keyword=palo+alto" target="_blank">https://ncp.nist.gov/repository?sortBy=modifiedDate%7Cdesc&amp;keyword=palo+alto</A></P> <P>&nbsp;</P> <P>&nbsp;</P> <P>&nbsp;</P> Mon, 13 Jan 2025 18:37:03 GMT https://live.paloaltonetworks.com/t5/general-topics/hardening-guide-for-pan-ngfw-and-global-protect/m-p/1066187#M122860 malmgren 2025-01-13T18:37:03Z https://live.paloaltonetworks.com/t5/general-topics/hardening-guide-for-pan-ngfw-and-global-protect/m-p/1066202#M122861 <P>This is the formatted document for the above NIST STIG which contains:</P> <UL> <LI style="font-weight: 400;" aria-level="1"><SPAN>U_PAN_NDM_V3R2_Manual_STIG</SPAN></LI> <LI style="font-weight: 400;" aria-level="1"><SPAN>U_PAN_IDPS_V3R1_Manual_STIG</SPAN></LI> <LI style="font-weight: 400;" aria-level="1"><SPAN>U_PAN_ALG_V3R2_Manual_STIG</SPAN></LI> </UL> <P>&nbsp;</P> Mon, 13 Jan 2025 19:25:24 GMT https://live.paloaltonetworks.com/t5/general-topics/hardening-guide-for-pan-ngfw-and-global-protect/m-p/1066202#M122861 malmgren 2025-01-13T19:25:24Z