Azure Marketplace - VM-Series Next-Generation Firewall (CIS Benchmark)

[James-Smith]

Does anyone know if the VM-Series Next-Generation Firewall from Palo Alto Networks within the Azure Marketplace meets any of the CIS Level 1 or 2 Benchmarks? If deploying these FWs from the Marketplace, do we need to harden the images using the latest CIS benchmark? Any idea or thoughts is greatly appreciated!!

[BPry]

@James-Smith,

You can't do anything to harden the underlying operating system of a VM-Series deployment. The underlying operating system is inaccessible to end-users.

[OtakarKlier]

Hello,

Those benchmarks are regarding configuration rather than hardening the appliance. Just make sure to follow best practices when setting them up and deploying them.

https://docs.paloaltonetworks.com/vm-series/9-0/vm-series-deployment/set-up-the-vm-series-firewall-o...

Regards,