Ensure Wireless Protection is configured with secure configuration

MittelStufe 1Manuelle Prüfungsophos

Beschreibung

When Sophos firewall is used as Wireless controller to manage Sophos Access Points, it is important to tighten configuration to prevent unauthorized access to the Wireless network. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

Navigate to 'Protect > Wireless > Wireless networks' Verify the existing 'Wireless' settings with 'Security mode', either 'WPA2 Personal' or 'WPA2 Enterprise' should be used. Under 'Advanced settings' Verify that 'Encryption' is set to 'AES[secure]' Verify that 'Time-based access' is 'Enable' with 'Select active time' and appropriate schedule to limit the availability. Verify that 'Client isolation' is 'Enabled'.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Navigate to 'Protect > Wireless > Wireless networks' Set the existing 'Wireless' settings with 'Security mode', either 'WPA2 Personal' or 'WPA2 Enterprise'. Under 'Advanced settings' Set 'Encryption' to 'AES[secure]' Set 'Time-based access' to 'Enable' with 'Select active time' and configure appropriate schedule to limit the availability. Set 'Client isolation' to 'Enabled'.

Eigenschaften

Betriebssysteme: Beliebig
Tags: sophoshardening
Referenz: CIS Sophos Firewall v22 Benchmark v1.0.0 - 5.9 Ensure Wireless Protection is configured with secure configuration