Rule explorer
Browse every hardening rule in the catalogue. Filter by platform, severity, profile level and whether the check can be automated.
40 rules foundof 11,219Page 1 of 2
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-FORTISWITCH-1.6.1.2 | Remove default admin user and create one with other namefortiswitch · Level 1 | fortiswitch | Critical | 1 | Automated |
| TMA-FORTISWITCH-1.7.1.1.1 | Remove default admin user and create one with other namefortiswitch · Level 1 | fortiswitch | Critical | 1 | Automated |
| TMA-FORTISWITCH-1.1.1 | Ensure administrator password retries and lockout time are configuredfortiswitch · Level 1 | fortiswitch | High | 1 | Automated |
| TMA-FORTISWITCH-1.2.1 | Ensure management GUI listens on secure TLS versionfortiswitch · Level 1 | fortiswitch | High | 1 | Automated |
| TMA-FORTISWITCH-1.3.1 | Ensure 'Password Policy' is enabledfortiswitch · Level 1 | fortiswitch | High | 1 | Automated |
| TMA-FORTISWITCH-1.4.2.2 | Ensure only encrypted access channels are enabledfortiswitch · Level 1 | fortiswitch | High | 1 | Automated |
| TMA-FORTISWITCH-1.5.1.1 | Ensure only SNMPv3 is enabledfortiswitch · Level 1 | fortiswitch | High | 1 | Automated |
| TMA-FORTISWITCH-1.5.1.2 | Allow only trusted hosts in SNMPv3fortiswitch · Level 2 | fortiswitch | High | 2 | Automated |
| TMA-FORTISWITCH-1.5.1.3 | Disable SNMPv3 Query Per Userfortiswitch · Level 2 | fortiswitch | High | 2 | Automated |
| TMA-FORTISWITCH-1.5.2.1 | Ensure the latest firmware is installedfortiswitch · Level 2 | fortiswitch | High | 2 | Manual review |
| TMA-FORTISWITCH-1.5.5.1 | Enable Global Strong Encryptionfortiswitch · Level 2 | fortiswitch | High | 2 | Automated |
| TMA-FORTISWITCH-1.6.1.1 | Ensure all the login accounts having specific trusted hosts enabledfortiswitch · Level 1 | fortiswitch | High | 1 | Automated |
| TMA-FORTISWITCH-1.7.1.1.2 | Ensure all the login accounts having specific trusted hosts enabledfortiswitch · Level 1 | fortiswitch | High | 1 | Automated |
| TMA-FORTISWITCH-1.7.1.1.5 | Ensure only encrypted access channels are enabledfortiswitch · Level 1 | fortiswitch | High | 1 | Automated |
| TMA-FORTISWITCH-2.5.2 | Dynamic ARP Inspectionfortiswitch · Level 1 | fortiswitch | High | 1 | Automated |
| TMA-FORTISWITCH-3.1.3.1 | Encrypt Log Transmission to Syslogfortiswitch · Level 1 | fortiswitch | High | 1 | Automated |
| TMA-FORTISWITCH-1.4.2.1 | Disable unsecure management services on Management, SVI, or Loopback interfacesfortiswitch · Level 1 | fortiswitch | Medium | 1 | Automated |
| TMA-FORTISWITCH-1.5.4.1 | Ensure correct system time is configured through NTPfortiswitch · Level 1 | fortiswitch | Medium | 1 | Automated |
| TMA-FORTISWITCH-1.6.2.1 | Ensure admin accounts with different privileges have their correct profiles assignedfortiswitch · Level 1 | fortiswitch | Medium | 1 | Manual review |
| TMA-FORTISWITCH-1.6.3.1 | Ensure default Admin ports are changedfortiswitch · Level 1 | fortiswitch | Medium | 1 | Automated |
| TMA-FORTISWITCH-1.6.3.2 | Ensure Admin idle timeout time is configuredfortiswitch · Level 1 | fortiswitch | Medium | 1 | Automated |
| TMA-FORTISWITCH-1.7.1.1.3 | Ensure admin accounts with different privileges have their correct profiles assignedfortiswitch · Level 1 | fortiswitch | Medium | 1 | Manual review |
| TMA-FORTISWITCH-1.7.1.1.4 | Ensure Admin idle timeout time is configuredfortiswitch · Level 1 | fortiswitch | Medium | 1 | Automated |
| TMA-FORTISWITCH-1.7.1.1.6 | Apply Local-in Policiesfortiswitch · Level 1 | fortiswitch | Medium | 1 | Automated |
| TMA-FORTISWITCH-1.7.1.1.7 | Ensure default Admin ports are changedfortiswitch · Level 1 | fortiswitch | Medium | 1 | Automated |