Ensure Privileged and Administrative Roles Are Restricted to Known IP Addresses

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

1. Confirm that LBAC is enabled for the Fusion environment. 2. Sign in to Fusion Security Console with appropriate privileges. 3. Navigate to Roles, Search, IT Security Manager (and other privileged roles). 4. Open the role and go to the Administration tab. 5. Verify that the checkbox Enable Role for Access from All IP Addresses is not selected. 6. Confirm that privileged roles are associated with the intended network perimeter or known IP range within LBAC configuration.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

1. Sign in to Fusion Security Console with an administrative account. 2. Navigate to Roles, Search, IT Security Manager (or equivalent privileged roles). 3. Go to the Administration tab and ensure the checkbox Enable Role for Access from All IP Addresses is cleared. 4. Verify that the role is correctly assigned to the appropriate network perimeter under LBAC settings, restricting access to known IP ranges. 5. Test access from a trusted IP and confirm the role remains functional; test from an unapproved IP to confirm access is denied.