TMAegisBeta
en
More rules for sophos

Sophos Firewall

TMA-SOPHOS-1.1.9

Ensure MFA for default admin

HighLevel 1Manual reviewsophos

Description

Implementing MFA strengthens the security of firewall console access by requiring an additional verification step, helping ensure that only authorized administrators can make changes to firewall configurations. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Navigate to ' System ' > 'Administration' > 'Device Access ' > 'Multi-factor Authentication for default admin' Turn ' ON ' MFA for default admin MFA doesn't apply to SSH sign-ins, allowing you to recover the account

How it is fixed

Fix method: Guidance or infrastructure patch

Navigate to ' System ' > 'Administration' > 'Device Access ' > 'Multi-factor Authentication for default admin' Turn ' ON ' MFA for default admin MFA doesn't apply to SSH sign-ins, allowing you to recover the account

Properties

Operating systems
Any
Tags
sophosauthentication
Reference
CIS Sophos Firewall v22 Benchmark v1.0.0 - 1.1.9 Ensure MFA for default admin