Ensure Wireless Protection is configured with secure configuration

MediaNivel 1Revisión manualsophos

Descripción

When Sophos firewall is used as Wireless controller to manage Sophos Access Points, it is important to tighten configuration to prevent unauthorized access to the Wireless network. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

Navigate to 'Protect > Wireless > Wireless networks' Verify the existing 'Wireless' settings with 'Security mode', either 'WPA2 Personal' or 'WPA2 Enterprise' should be used. Under 'Advanced settings' Verify that 'Encryption' is set to 'AES[secure]' Verify that 'Time-based access' is 'Enable' with 'Select active time' and appropriate schedule to limit the availability. Verify that 'Client isolation' is 'Enabled'.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

Navigate to 'Protect > Wireless > Wireless networks' Set the existing 'Wireless' settings with 'Security mode', either 'WPA2 Personal' or 'WPA2 Enterprise'. Under 'Advanced settings' Set 'Encryption' to 'AES[secure]' Set 'Time-based access' to 'Enable' with 'Select active time' and configure appropriate schedule to limit the availability. Set 'Client isolation' to 'Enabled'.

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: sophoshardening
Referencia: CIS Sophos Firewall v22 Benchmark v1.0.0 - 5.9 Ensure Wireless Protection is configured with secure configuration