Revision 1.15

1.2.4 Ensure valid certificate is set for browser-based administrator interface - Authentication Profile
1.2.4 Ensure valid certificate is set for browser-based administrator interface - Certificate Profiles
1.2.4 Ensure valid certificate is set for browser-based administrator interface - Certificates
1.6.3 Ensure that the certificate securing Remote Access VPNs is valid - Certificates
1.6.3 Ensure that the certificate securing Remote Access VPNs is valid - GlobalProtect Gateways
1.6.3 Ensure that the certificate securing Remote Access VPNs is valid - GlobalProtect Portals
2.1 Ensure that IP addresses are mapped to usernames - User ID Agents
2.1 Ensure that IP addresses are mapped to usernames - Zones
2.2 Ensure that WMI probing is disabled
6.17 Ensure that a Zone Protection Profile with Flood Protection settings enabled for all flood types is attached to all untrusted zones
7.3 Ensure 'Security Policy' denying any/all traffic exists at the bottom of the security policies ruleset
8.3 Ensure that the Certificate used for Decryption is Trusted