Hi estint,

I believe there is a support case raised for this now. I will post the answer here for the benefit of other members.

To help with compliance use of Flow Security Central is recommended.

• Visibility into Security Compliance: FSC provides businesses with a security heat map and complete visibility into the security posture of their environment. FSC also identifies any security vulnerabilities using more than 800 automated audit checks based on the industry's best practices.
• Optimization of Security Compliance: FSC provides cloud operators with a one-click feature to easily fix their security issues. FSC also provides out-of-the-box security policies to automate the checks for common regulatory compliance policies, such as HIPAA, PCI-DSS, CIS, and so on.
• Control over Security Compliance: FSC helps you to set policies that continuously detect security vulnerabilities in real-time and automate the actions needed to fix them. You can also create your custom audit checks in FSC to meet your business-specific security compliance needs.

Upgrade to the recent AOS version is another good idea.

Our scan’s also show “SMB Signing not required” vulnerability on CVM/Prism.

Is there an update to this question?

thanks