Explorateur de règles
Parcourez toutes les règles de durcissement du catalogue. Filtrez par plateforme, gravité, niveau de profil et selon que la vérification peut être automatisée.
42 règles trouvéessur 16 927Page 1 sur 2
| ID | Titre | Plateforme | Gravité | Niveau | Vérification |
|---|---|---|---|---|---|
| TMA-SHAREPOINT-1.2 | Ensure that the SharePoint Central Administration Site is TLS- enabledsharepoint · Niveau 1 | sharepoint | Élevée | 1 | Revue manuelle |
| TMA-SHAREPOINT-2.2 | Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges for the local server.sharepoint · Niveau 1 | sharepoint | Élevée | 1 | Automatisée |
| TMA-SHAREPOINT-2.3 | Ensure the SharePoint setup account is configured with the minimum privileges in Active Directory.sharepoint · Niveau 1 | sharepoint | Élevée | 1 | Revue manuelle |
| TMA-SHAREPOINT-2.4 | Ensure the SharePoint setup account is configured with the minimum privileges on the SQL server.sharepoint · Niveau 1 | sharepoint | Élevée | 1 | Revue manuelle |
| TMA-SHAREPOINT-2.5 | Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges on the SQL server.sharepoint · Niveau 1 | sharepoint | Élevée | 1 | Revue manuelle |
| TMA-SHAREPOINT-2.7 | Ensure the SharePoint Central Administration site is not accessible from Extranet or Internet connectionssharepoint · Niveau 1 | sharepoint | Élevée | 1 | Revue manuelle |
| TMA-SHAREPOINT-3.5 | Ensure that SharePoint specific malware (i.e. anti-virus) protection software is integrated and configuredsharepoint · Niveau 1 | sharepoint | Élevée | 1 | Automatisée |
| TMA-SHAREPOINT-3.11 | Ensure that the SharePoint Central Administration interface is not hosted in the DMZ.sharepoint · Niveau 1 | sharepoint | Élevée | 1 | Revue manuelle |
| TMA-SHAREPOINT-4.4 | Ensure Anonymous authentication is deniedsharepoint · Niveau 1 | sharepoint | Élevée | 1 | Revue manuelle |
| TMA-SHAREPOINT-7.3 | Ensure compilation or scripting of database pages via the PageParserPaths elements is not allowedsharepoint · Niveau 1 | sharepoint | Élevée | 1 | Automatisée |
| TMA-SHAREPOINT-FARM-ADMINS | Ensure Farm Administrators group membership is restrictedsharepoint · Niveau 1 | sharepoint | Élevée | 1 | Revue manuelle |
| TMA-SHAREPOINT-HTTPS-ONLY | Ensure all web applications use HTTPSsharepoint · Niveau 1 | sharepoint | Élevée | 1 | Automatisée |
| TMA-SHAREPOINT-SERVICE-ACCOUNTS | Ensure web application pools do not run as the farm accountsharepoint · Niveau 1 | sharepoint | Élevée | 1 | Automatisée |
| TMA-SHAREPOINT-1.1 | Ensure access to SharePointEmailws.asmx is limited to only the server farm accountsharepoint · Niveau 1 | sharepoint | Moyenne | 1 | Revue manuelle |
| TMA-SHAREPOINT-1.3 | Ensure specific whitelisted IP addresses, IP address ranges, and/or domains are setsharepoint · Niveau 1 | sharepoint | Moyenne | 1 | Revue manuelle |
| TMA-SHAREPOINT-1.4 | Ensure that the underlying Internet Information Services (IIS) Authentication module is set to use Kerberos as its Authentication Providersharepoint · Niveau 1 | sharepoint | Moyenne | 1 | Revue manuelle |
| TMA-SHAREPOINT-2.1 | Ensure 'Blocked File Types' is configured to match the enterprise blacklistsharepoint · Niveau 1 | sharepoint | Moyenne | 1 | Revue manuelle |
| TMA-SHAREPOINT-2.8 | Ensure Dbcreator and Securityadmin roles are only used as neededsharepoint · Niveau 1 | sharepoint | Moyenne | 1 | Revue manuelle |
| TMA-SHAREPOINT-3.2 | Ensure SharePoint implements an information system isolation boundary that minimizes the number of non-security functions included within the boundary containing security functions.sharepoint · Niveau 1 | sharepoint | Moyenne | 1 | Revue manuelle |
| TMA-SHAREPOINT-3.3 | Ensure SharePoint implements security functions as a layered structure minimizing interactions between layers of the design and avoiding any dependence by lower layers on the functionality or correctness of higher layers.sharepoint · Niveau 1 | sharepoint | Moyenne | 1 | Revue manuelle |
| TMA-SHAREPOINT-3.4 | Ensure SharePoint identifies data type, specification, and usage when transferring information between different security domains so policy restrictions may be applied.sharepoint · Niveau 1 | sharepoint | Moyenne | 1 | Revue manuelle |
| TMA-SHAREPOINT-3.6 | Ensure that SharePoint is configured with "Strict" browser file handling settingssharepoint · Niveau 1 | sharepoint | Moyenne | 1 | Automatisée |
| TMA-SHAREPOINT-3.9 | Ensure that SharePoint application servers are protected by a reverse proxysharepoint · Niveau 1 | sharepoint | Moyenne | 1 | Revue manuelle |
| TMA-SHAREPOINT-3.10 | Ensure SharePoint database servers are segregated from application server and placed in a secure zone.sharepoint · Niveau 1 | sharepoint | Moyenne | 1 | Revue manuelle |
| TMA-SHAREPOINT-4.2 | Ensure claims-based authentication is used for all web applications and zones of a SharePoint 2019 farmsharepoint · Niveau 1 | sharepoint | Moyenne | 1 | Automatisée |