TMAegisBêta
Plus de règles pour google-workspace

Google Workspace

TMA-GWS-3.1.3.5.2

Ensure automatic forwarding options are disabled

MoyenneNiveau 1Revue manuellegoogle-workspace

Description

You should disable automatic forwarding to prevent users from auto-forwarding mail. In the event that an attacker gains control of an end-user account they could create rules to ex-filtrate data from your environment.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under End User Access - Automatic forwarding, ensure Allow users to automatically forward incoming email to another address is unchecked

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under End User Access - Automatic forwarding, set Allow users to automatically forward incoming email to another address to unchecked 6. Select Save

Propriétés

Systèmes d'exploitation
Tous
Étiquettes
google-workspacesaas
Référence
CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.3.5.2 Ensure automatic forwarding options are disabled