Detections
Analytics

CSCv6|13.3

Title

Deploy an automated tool on network perimeters that monitors for sensitive information , keywords, and other document characteristics to discover unauthorized attempts to exfiltrate data.

Description

Deploy an automated tool on network perimeters that monitors for sensitive information (e.g., personally identifiable information), keywords, and other document characteristics to discover unauthorized attempts to exfiltrate data across network boundaries and block such transfers while alerting information security personnel.

Reference Item Details

Category: Data Protection

Family: Network

Audit Items

View all Reference Audit Items

NamePluginAudit Name
6.14 Ensure alerting after a threshold of credit card or Social Security numbers is detected is enabled - Data Filtering ProfilePalo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
6.14 Ensure alerting after a threshold of credit card or Social Security numbers is detected is enabled - Data Filtering ProfilePalo_AltoCIS Palo Alto Firewall 9 Benchmark v1.0.0 L1
6.14 Ensure alerting after a threshold of credit card or Social Security numbers is detected is enabled - Data Filtering ProfilePalo_AltoCIS Palo Alto Firewall 8 Benchmark L1 v1.0.0
6.14 Ensure alerting after a threshold of credit card or Social Security numbers is detected is enabled - Data Filtering ProfilePalo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
6.14 Ensure alerting after a threshold of credit card or Social Security numbers is detected is enabled - Data ObjectPalo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
6.14 Ensure alerting after a threshold of credit card or Social Security numbers is detected is enabled - Data ObjectPalo_AltoCIS Palo Alto Firewall 8 Benchmark L1 v1.0.0
6.14 Ensure alerting after a threshold of credit card or Social Security numbers is detected is enabled - Data ObjectPalo_AltoCIS Palo Alto Firewall 9 Benchmark v1.0.0 L1
6.14 Ensure alerting after a threshold of credit card or Social Security numbers is detected is enabled - Data ObjectPalo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
6.15 Ensure a secure Data Filtering profile is applied to all security policies allowing traffic to or from the InternetPalo_AltoCIS Palo Alto Firewall 8 Benchmark L1 v1.0.0
6.15 Ensure a secure Data Filtering profile is applied to all security policies allowing traffic to or from the InternetPalo_AltoCIS Palo Alto Firewall 9 Benchmark v1.0.0 L1
6.15 Ensure a secure Data Filtering profile is applied to all security policies allowing traffic to or from the InternetPalo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
6.15 Ensure a secure Data Filtering profile is applied to all security policies allowing traffic to or from the InternetPalo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0