GlobalProtect Data File update schedule is not following best practices-paloaltonetworks-panos

GlobalProtect Data File update schedule is not following best practices-paloaltonetworks-panos
0

GlobalProtect Data File update schedule is not following best practices-paloaltonetworks-panos

Vendor: paloaltonetworks

OS: panos

Description:
Indeni will alert if the update schedule for GlobalProtect Data File is not following best practices.

Remediation Steps:
Ensure update recurrence is set to “hourly” AND update action is set to “download-and-install”.

How does this work?
This alert uses the Palo Alto Networks API interface to parse through Dynamic Update schedule and alert the admin if it is following best practices.

Why is this important?
GlobalProtect Data File has vendor-specific information for the HIP feature to be accurate and current so the checks can be made effectively and reduce false positives. Always ensure the action is “download-and-install” so the updates takes into effect immediately.

Without Indeni how would you find this?
Login to the device’s web interface and click on “Device” -> “Dynamic Updates”.

panos-gp-update-schedule

Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/parsers/src/panw/panos/panos-gp-update-schedule/panos-gp-update-schedule.ind.yaml

PanosGpUpdateScheduleRule

Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/rules/templatebased/paloaltonetworks/PanosGpUpdateScheduleRule.scala