Ensure Privileged and Administrative Roles Are Restricted to Known IP Addresses

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

1. Confirm that LBAC is enabled for the Fusion environment. 2. Sign in to Fusion Security Console with appropriate privileges. 3. Navigate to Roles, Search, IT Security Manager (and other privileged roles). 4. Open the role and go to the Administration tab. 5. Verify that the checkbox Enable Role for Access from All IP Addresses is not selected. 6. Confirm that privileged roles are associated with the intended network perimeter or known IP range within LBAC configuration.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

1. Sign in to Fusion Security Console with an administrative account. 2. Navigate to Roles, Search, IT Security Manager (or equivalent privileged roles). 3. Go to the Administration tab and ensure the checkbox Enable Role for Access from All IP Addresses is cleared. 4. Verify that the role is correctly assigned to the appropriate network perimeter under LBAC settings, restricting access to known IP ranges. 5. Test access from a trusted IP and confirm the role remains functional; test from an unapproved IP to confirm access is denied.