Ensure Wireless Protection is configured with secure configuration

MoyenneNiveau 1Revue manuellesophos

Description

When Sophos firewall is used as Wireless controller to manage Sophos Access Points, it is important to tighten configuration to prevent unauthorized access to the Wireless network. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

Navigate to 'Protect > Wireless > Wireless networks' Verify the existing 'Wireless' settings with 'Security mode', either 'WPA2 Personal' or 'WPA2 Enterprise' should be used. Under 'Advanced settings' Verify that 'Encryption' is set to 'AES[secure]' Verify that 'Time-based access' is 'Enable' with 'Select active time' and appropriate schedule to limit the availability. Verify that 'Client isolation' is 'Enabled'.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Navigate to 'Protect > Wireless > Wireless networks' Set the existing 'Wireless' settings with 'Security mode', either 'WPA2 Personal' or 'WPA2 Enterprise'. Under 'Advanced settings' Set 'Encryption' to 'AES[secure]' Set 'Time-based access' to 'Enable' with 'Select active time' and configure appropriate schedule to limit the availability. Set 'Client isolation' to 'Enabled'.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: sophoshardening
Référence: CIS Sophos Firewall v22 Benchmark v1.0.0 - 5.9 Ensure Wireless Protection is configured with secure configuration