Output Normalization and Compliance IDs - Palo Alto Edition

Summary

In an effort to normalize the output from the compliance plugins, and provide a consistent identifier for the output, we are releasing a patch to the Palo Alto compliance plugin that makes the following improvements:

• ID generation is more consistent between audits.
• All results should have a policy value reported.
• The majority of results should have actual value or error reported. The exception to this is policies that use a "report" check type. 

Potential Impacts:

Any customers that rely on exact content matches of actual values by using third party tools or custom audit files may have failed results following the update. This would include customers that use the known good functionality from tools that provide baseline or gold image auditing.

Tenable Plugins

• 64095 - Palo Alto Compliance Plugin
•  

Target Release Date

March 18, 20022

Additional Notes:

The Palo Alto plugin no longer supports the 'AUDIT_REPORTS' check. This does not affect any current audits, however any customers using custom audits may have to update accordingly. Equivalent functionality exists by using the 'AUDIT_XML' check with 'api_request_type' set to 'report'.