TMA-SOPHOS-1.1.7
Ensure valid certificate is set for web browser used to access Webadmin interface
Beschreibung
Default HTTPS port 4444 is used to access Sophos Firewall's Webadmin interface. HTTPS certificate used to secure the administrative session should satisfy the following criteria: 1. A valid certificate from a trusted source should be used. While a certificate from a trusted Public Certificate Authority is certainly valid, one from a trusted Private Certificate Authority is absolutely acceptable for this purpose. 2. The certificate should have a valid date. It should not have a "to" date in the past (it should not be expired), and should not have a "from" date in the future. 3. The certificate should use an acceptable cipher and encryption level. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).
So wird geprüft
Prüfmethode: Manuelle Prüfung
Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.
Navigate to 'System > Certificates > Certificates'. Verify that the certificate used to secure HTTPS sessions meets the criteria by reviewing the appropriate certificate. Navigate to 'System > Administration > Admin settings > Admin console and end-user interaction > Certificate'. Verify that correct Certificate is used for Webadmin, user portal, captive portal and SPX reply portal.
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
If a new administrative Certificate is needed, acquire a Certificate that meets the stated criteria and upload it to the Sophos Firewall. Optionally, download the appliance Certificate Authority to the web browser used for administration. Navigate to 'System > Certificates > Certificates > Add' Import an appropriate Certificate for your administrative session, from a trusted Certificate Authority. Navigate to 'System > Administration > Admin settings > Admin console and end-user interaction > Certificate' Choose the correct certificate to use for the web based administrative session.
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- sophosauthentication
- Referenz
- CIS Sophos Firewall v22 Benchmark v1.0.0 - 1.1.7 Ensure valid certificate is set for web browser used to access Webadmin interface