Ensure Antivirus Definition Push Updates are Configured

AltaNivel 2Automatizadafortigate

Descripción

Ensure FortiGate is configured to accept antivirus definition push updates. PASS requires the FortiGuard update schedule enabled with frequency automatic. Audited against FortiOS 'show full-configuration' output (run it from the global context on VDOM-enabled units and save the full output); patterns are scoped to the named 'config ... end' block, whose member lines are indented.

Cómo se verifica

Método de auditoría: Patrón de configuración

Patrón: (?m)^config system autoupdate schedule\n(?:(?:[ \t]+[^\n]*\n)*?[ \t]+set status enable[ \t]*\n(?:[ \t]+[^\n]*\n)*?[ \t]+set frequency automatic[ \t]*$|(?:[ \t]+[^\n]*\n)*?[ \t]+set frequency automatic[ \t]*\n(?:[ \t]+[^\n]*\n)*?[ \t]+set status enable[ \t]*$)

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

config system autoupdate schedule set status enable set frequency automatic end # CIS guidance: On GUI: 1. Access the FortiGate administrative web access page and go to System > FortiGuard. 2. Under "FortiGuard Updates" ensure that the "Scheduled updates" is set to "Automatic". On CLI: config system autoupdate schedule set status enable set frequency automatic end

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: fortigatethreat-prevention
Referencia: CIS FortiGate 7.4.x Benchmark v1.0.1 - 4.2.1 Ensure Antivirus Definition Push Updates are Configured

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target fortigate --level 2