Ensure 'Pattern updates' is set to download and install updates every 15 minutes

HighLevel 1Manual reviewsophos

Description

Set Pattern download/installation to ‘auto update' and interval of ‘every 15 minutes' Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Navigate to 'System > Backup & Firmware > Pattern Updates'. Verify that 'Pattern download/installation > Auto update' is set to 'ON'. Verify that 'Interval' is set to 'Every 15 minutes'. Verify that 'Pattern' 'Last successful update' is showing 'Success' For an Air-gap environment patterns can also be downloaded manually. (Full steps: CIS 3.2.)

How it is fixed

Fix method: Guidance or infrastructure patch

Navigate to 'System > Backup & Firmware > Pattern Updates'. Set 'Pattern download/installation > Auto update' to 'ON'. Set the download 'Interval' to 'Every 15 minutes'. When the 'Pattern' 'Last successful update' is not showing 'Success', click 'Update pattern now' to download the updates manually.

Properties

Operating systems: Any
Tags: sophosupdates
Reference: CIS Sophos Firewall v22 Benchmark v1.0.0 - 3.2 Ensure 'Pattern updates' is set to download and install updates every 15 minutes