Contributions
Implementation examples
Every example is tied to a specific control and, ideally, to the individual assessment objectives it claims to satisfy. Verdicts and reasoning are attached to each one.
2 examples referencing Palo Alto GlobalProtect
- SC.L2-3.13.7[a]
Always-on full tunnel with local LAN access and NIC bridging disabled in client policy
AO coverage. Addresses the single Split Tunneling objective for managed endpoints that can reach CUI. Client posture. The VPN profile is deployed by MDM, set to always-on with user-logon connect, and…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet - AC.L2-3.1.13[a] [b]
TLS 1.2+ and approved ciphers on every remote access path
AO coverage. Addresses both Remote Access Confidentiality objectives. Identified mechanisms. Remote paths use TLS 1.2+ (SaaS/IdP) or IPsec/IKE suites approved on the crypto inventory (VPN). TLS…
ControlVerdict Corpus@cv-corpusJul 31, 2026No verdicts yet