Rule explorer
Browse every hardening rule in the catalog. Filter by platform, severity, profile level and whether the check can be automated.
67 rules foundof 16,927Page 1 of 3
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-FORTIGATE-2.4.1 | Remove default admin user and create one with other namefortigate · Level 1 | fortigate | Critical | 1 | Automated |
| TMA-FORTIGATE-2.1.6 | Ensure the latest firmware is installedfortigate · Level 2 | fortigate | High | 2 | Manual review |
| TMA-FORTIGATE-2.1.7 | Disable USB Firmware and configuration installationfortigate · Level 2 | fortigate | High | 2 | Automated |
| TMA-FORTIGATE-2.1.8 | Disable static keys for TLSfortigate · Level 2 | fortigate | High | 2 | Automated |
| TMA-FORTIGATE-2.1.9 | Enable Global Strong Encryptionfortigate · Level 2 | fortigate | High | 2 | Automated |
| TMA-FORTIGATE-2.1.10 | Ensure management GUI listens on secure TLS versionfortigate · Level 1 | fortigate | High | 1 | Automated |
| TMA-FORTIGATE-2.2.1 | Ensure 'Password Policy' is enabledfortigate · Level 1 | fortigate | High | 1 | Automated |
| TMA-FORTIGATE-2.2.2 | Ensure administrator password retries and lockout time are configuredfortigate · Level 1 | fortigate | High | 1 | Automated |
| TMA-FORTIGATE-2.3.1 | Ensure only SNMPv3 is enabledfortigate · Level 1 | fortigate | High | 1 | Automated |
| TMA-FORTIGATE-2.3.2 | Allow only trusted hosts in SNMPv3fortigate · Level 2 | fortigate | High | 2 | Automated |
| TMA-FORTIGATE-2.3.3 | Disable SNMPv3 Query Per Userfortigate · Level 2 | fortigate | High | 2 | Automated |
| TMA-FORTIGATE-2.4.2 | Ensure all the login accounts having specific trusted hosts enabledfortigate · Level 1 | fortigate | High | 1 | Automated |
| TMA-FORTIGATE-2.4.5 | Ensure only encrypted access channels are enabledfortigate · Level 1 | fortigate | High | 1 | Automated |
| TMA-FORTIGATE-3.2 | Ensure that policies do not use "ALL" as Servicefortigate · Level 1 | fortigate | High | 1 | Automated |
| TMA-FORTIGATE-3.3 | Ensure firewall policy denying all traffic to/from Tor, malicious server, or scanner IP addresses using ISDBfortigate · Level 1 | fortigate | High | 1 | Automated |
| TMA-FORTIGATE-4.1.1 | Detect Botnet connectionsfortigate · Level 2 | fortigate | High | 2 | Automated |
| TMA-FORTIGATE-4.1.2 | Apply IPS Security Profile to Policiesfortigate · Level 1 | fortigate | High | 1 | Manual review |
| TMA-FORTIGATE-4.2.1 | Ensure Antivirus Definition Push Updates are Configuredfortigate · Level 2 | fortigate | High | 2 | Automated |
| TMA-FORTIGATE-4.2.2 | Apply Antivirus Security Profile to Policiesfortigate · Level 2 | fortigate | High | 2 | Manual review |
| TMA-FORTIGATE-4.2.5 | Enable grayware detection on antivirusfortigate · Level 2 | fortigate | High | 2 | Automated |
| TMA-FORTIGATE-4.3.1 | Enable Botnet C&C Domain Blocking DNS Filterfortigate · Level 2 | fortigate | High | 2 | Automated |
| TMA-FORTIGATE-6.1.2 | Enable Limited TLS Versions for SSL VPNfortigate · Level 2 | fortigate | High | 2 | Automated |
| TMA-FORTIGATE-7.3.1 | Encrypt Log Transmission to FortiAnalyzer / FortiManagerfortigate · Level 1 | fortigate | High | 1 | Automated |
| TMA-FORTIGATE-7.3.2 | Encrypt Log Transmission to Syslogfortigate · Level 1 | fortigate | High | 1 | Automated |
| TMA-FORTIGATE-7.3.3 | Encrypt Log Transmission to Syslogfortigate · Level 1 | fortigate | High | 1 | Automated |