Require that a description, tag, or audit comment be entered when creating or editing
a security rule.
Where Can I Use
This? | What Do I Need? |
- NGFW (Managed by Strata Cloud Manager)
- NGFW (Managed by PAN-OS or Panorama)
- Prisma Access (Managed by Panorama or Strata Cloud Manager)
|
Check for any license or role requirements for
the products you're using.
|
Enforcing a security rule description, tag, and audit comment policy isn’t
only important for staying compliant with security best practices, but also for
maintaining clarity, organization, and accountability within the Security policy.
These elements provide essential context and information about each rule, aiding in
policy management, troubleshooting, and compliance adherence.
For each
policy rule, administrators can add a descriptive rule name
and a detailed description. Rule descriptions are essential for conveying the
purpose and intent of the rule, ensuring that other administrators can quickly
comprehend its function. A well-written description should succinctly articulate the
rule's role and relevance in the Security policy.
Administrators can tag security rules with relevant labels or categories,
making it easier to classify and search for rules based on specific criteria. Tags
help organize the rulebase efficiently, providing a structured approach to rule
management and policy organization.
Enforcing an audit comment for each security rule allows administrators to
document any additional notes, rationale, or comments related to the rule. These
comments can include information about the reasoning behind the rule, compliance
requirements, or any specific considerations that influenced its creation.
Regularly enforcing and updating rule descriptions, tags, and audit
comments is crucial for maintaining a well-organized and documented Security policy.
It enhances collaboration among administrators, streamlines policy management, and
simplifies auditing processes. Additionally, it aids in compliance audits and
demonstrates a disciplined approach to network security and policy enforcement.
For uniformity, you can set specific requirements for what the audit comment can
include.