topic Azure Marketplace - VM-Series Next-Generation Firewall (CIS Benchmark) in General Topics

Azure Marketplace - VM-Series Next-Generation Firewall (CIS Benchmark)

James-Smith — Wed, 26 Aug 2020 17:32:38 GMT

Does anyone know if the VM-Series Next-Generation Firewall from Palo Alto Networks within the Azure Marketplace meets any of the CIS Level 1 or 2 Benchmarks? If deploying these FWs from the Marketplace, do we need to harden the images using the latest CIS benchmark? Any idea or thoughts is greatly appreciated!!

Re: Azure Marketplace - VM-Series Next-Generation Firewall (CIS Benchmark)

BPry — Fri, 28 Aug 2020 05:01:26 GMT

@James-Smith,

You can't do anything to harden the underlying operating system of a VM-Series deployment. The underlying operating system is inaccessible to end-users.

Re: Azure Marketplace - VM-Series Next-Generation Firewall (CIS Benchmark)

OtakarKlier — Fri, 28 Aug 2020 21:01:04 GMT

Hello,

Those benchmarks are regarding configuration rather than hardening the appliance. Just make sure to follow best practices when setting them up and deploying them.

https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-on-azure.html

Regards,