mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
29 lines
1.5 KiB
Markdown
29 lines
1.5 KiB
Markdown
# Standards and Frameworks - Palo Alto NGFW
|
|
|
|
## Industry Standards
|
|
|
|
- **NIST SP 800-41 Rev 1** - Guidelines on Firewalls and Firewall Policy
|
|
- **NIST SP 800-53 Rev 5** - SC-7 (Boundary Protection), AC-4 (Information Flow Enforcement)
|
|
- **CIS Controls v8** - Control 4 (Secure Configuration), Control 9 (Email and Web Browser Protections), Control 13 (Network Monitoring and Defense)
|
|
- **PCI DSS v4.0** - Requirement 1 (Install and Maintain Network Security Controls)
|
|
- **ISO 27001:2022** - A.13.1 (Network Security Management)
|
|
|
|
## Palo Alto Specific Standards
|
|
|
|
- **PAN-OS Security Configuration Benchmark** - CIS Benchmark for Palo Alto firewalls
|
|
- **Best Practices for Completing NGFW Deployment** - docs.paloaltonetworks.com
|
|
- **Security Policy Best Practices** - Application-based rules, zone segmentation
|
|
- **SSL Decryption Best Practices** - Certificate management, excluded categories
|
|
- **Threat Prevention Best Practices** - Profile configuration for AV, AS, VP, URL, WildFire
|
|
|
|
## Compliance Mapping
|
|
|
|
| Control | PAN-OS Feature |
|
|
|---------|---------------|
|
|
| Access Control (AC-4) | Security Policies with App-ID and User-ID |
|
|
| Boundary Protection (SC-7) | Zone-based architecture with inter-zone policies |
|
|
| Malicious Code Protection (SI-3) | WildFire, Anti-Virus, Anti-Spyware profiles |
|
|
| Audit and Accountability (AU-3) | Traffic, Threat, URL, WildFire logging |
|
|
| Encryption (SC-8) | SSL/TLS decryption and inspection |
|
|
| DoS Protection (SC-5) | Zone Protection profiles with flood thresholds |
|