Update of URL Filtering Database

MittelStufe 1Manuelle Prüfungcisco-ftd

Beschreibung

The URL Filtering database should be automatically downloaded and deployed at a reasonable cadence, at a minimum daily. The categorization of websites of course lags behind the deployment of new sites. In addition, malicious sites often see changes in site names happen at an accelerated rate (fast flux DNS), to avoid being categorized as malicious. Not reliably checkable from an exported configuration. Reported as SKIP with review instructions.

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Not reliably checkable from an exported configuration. Navigate to System (Gear Icon) > Scheduling Verify that there is a job scheduled at least daily to update the URL Database. In the lower half of the screen, verify that the URL Database update job is running successfully, and that the cadence matches the desired frequency of updates.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Navigate to System (Gear Icon) > Scheduling Choose "Add Task" For "Job Type", select "Update URL Filtering Database" Choose Recurring, with a cadence of one daily or less. It may be desirable to update this database more frequently. Set the scheduled time to match your organizations policies. Give the job a descriptive name. Choose "Save"

Eigenschaften

Betriebssysteme: Beliebig
Tags: cisco-ftdnetworkhardening
Referenz: CIS Cisco Firepower Threat Defense Benchmark v1.0.0 - 1.3.3 Update of URL Filtering Database