Ensure that scheduled vulnerability scan is enabled on all servers

MediumLevel 1Manual reviewalibaba

Description

Ensure that scheduled vulnerability scan is enabled on all servers. Be sure that vulnerability scan is performed periodically to discover system vulnerabilities in time. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

1. Logon to Security Center Console. 2. Select Vulnerabilities. 3. Click Settings. 4. Ensure that all type of vulnerabilities is enabled. 5. Ensure that High and Medium vulnerabilities scan level are enabled. Expected state: 1. Login to Security Center Console. 2. Select Vulnerabilities. 3. Click Settings. 4. Apply all type of vulnerabilities. 5. Enable High and Medium vulnerabilities scan level.

How it is fixed

Fix method: Guidance or infrastructure patch

1. Login to Security Center Console. 2. Select Vulnerabilities. 3. Click Settings. 4. Apply all type of vulnerabilities. 5. Enable High and Medium vulnerabilities scan level.

Properties

Operating systems: Any
Tags: alibabasecurity-center
Reference: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 8.7 Ensure that scheduled vulnerability scan is enabled on all servers