Ensure that scheduled vulnerability scan is enabled on all servers

MoyenneNiveau 1Revue manuellealibaba

Description

Ensure that scheduled vulnerability scan is enabled on all servers. Be sure that vulnerability scan is performed periodically to discover system vulnerabilities in time. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

1. Logon to Security Center Console. 2. Select Vulnerabilities. 3. Click Settings. 4. Ensure that all type of vulnerabilities is enabled. 5. Ensure that High and Medium vulnerabilities scan level are enabled. Expected state: 1. Login to Security Center Console. 2. Select Vulnerabilities. 3. Click Settings. 4. Apply all type of vulnerabilities. 5. Enable High and Medium vulnerabilities scan level.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

1. Login to Security Center Console. 2. Select Vulnerabilities. 3. Click Settings. 4. Apply all type of vulnerabilities. 5. Enable High and Medium vulnerabilities scan level.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: alibabasecurity-center
Référence: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 8.7 Ensure that scheduled vulnerability scan is enabled on all servers