TMA-CISCO-FTD-2.1.4
Enable TLS server identity discovery
Description
TLS server identity discovery is the process by which a FTD verifies the identity of the server that is trying to make a secure connection via TLS or SSL. This is vital for ensuring the security and authenticity of the server. Determining that the incoming traffic is originated from a secure server is important to the safety of your network. Enabling TLS server identity discovery allows FTD to determine if the source of traffic is communicating through a secure server. Not reliably checkable from an exported configuration. Reported as SKIP with review instructions.
Méthode de vérification
Méthode d'audit: Revue manuelle
Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.
Not reliably checkable from an exported configuration. Policies > Access Control > Advanced View your access control policies Go to advanced settings Verify TLS Server Identity Discovery is selected
Méthode de correction
Méthode de correction: Recommandation ou correctif d'infrastructure
Policies > Access Control > Advanced Check TLS Server Identity Discovery
Propriétés
- Systèmes d'exploitation
- Tous
- Étiquettes
- cisco-ftdnetworkaaa
- Référence
- CIS Cisco Firepower Threat Defense Benchmark v1.0.0 - 2.1.4 Enable TLS server identity discovery