Explorateur de règles
Parcourez toutes les règles de durcissement du catalogue. Filtrez par plateforme, gravité, niveau de profil et selon que la vérification peut être automatisée.
40 règles trouvéessur 16 927Page 1 sur 2
| ID | Titre | Plateforme | Gravité | Niveau | Vérification |
|---|---|---|---|---|---|
| TMA-SOPHOS-1.1.1 | Ensure admin session 'logout' for inactivity and 'block' is configured for failed sign-insophos · Niveau 1 | sophos | Élevée | 1 | Revue manuelle |
| TMA-SOPHOS-1.1.4 | Ensure SSL server certificate for remote SSL VPN is configured correctlysophos · Niveau 2 | sophos | Élevée | 2 | Revue manuelle |
| TMA-SOPHOS-1.1.5 | Ensure password complexity check is enabledsophos · Niveau 1 | sophos | Élevée | 1 | Revue manuelle |
| TMA-SOPHOS-1.1.6 | Ensure management access to the device is restricted from selected IP addresses and disable from WAN Zonesophos · Niveau 1 | sophos | Élevée | 1 | Revue manuelle |
| TMA-SOPHOS-1.1.8 | Ensure MFA for Web console access and remote access VPNsophos · Niveau 1 | sophos | Élevée | 1 | Revue manuelle |
| TMA-SOPHOS-1.1.9 | Ensure MFA for default adminsophos · Niveau 1 | sophos | Élevée | 1 | Revue manuelle |
| TMA-SOPHOS-1.2.1 | Ensure SNMPv3 is selected for queries and trapssophos · Niveau 1 | sophos | Élevée | 1 | Revue manuelle |
| TMA-SOPHOS-2.2 | Ensure Encrypted connection is used in connecting external Active Directory and LDAPsophos · Niveau 1 | sophos | Élevée | 1 | Revue manuelle |
| TMA-SOPHOS-3.2 | Ensure 'Pattern updates' is set to download and install updates every 15 minutessophos · Niveau 1 | sophos | Élevée | 1 | Revue manuelle |
| TMA-SOPHOS-3.4 | Ensure Sophos Firewall takes encrypted backup of the configuration and send to designated email address with scheduled frequencysophos · Niveau 1 | sophos | Élevée | 1 | Revue manuelle |
| TMA-SOPHOS-3.6 | Ensure Site-to-Site IPSec VPN is not configured with "Aggressive Mode"sophos · Niveau 2 | sophos | Élevée | 2 | Revue manuelle |
| TMA-SOPHOS-4.1 | Ensure 'Sophos X-Ops threat feeds (Advanced threat protection)' is set to ‘Enabled' and Policy is set to ‘Log and drop'sophos · Niveau 2 | sophos | Élevée | 2 | Revue manuelle |
| TMA-SOPHOS-4.2 | Ensure Zero-day protection is enabled at the firewall rule for web protection and does not exclude any file type from zero-day protection analysissophos · Niveau 2 | sophos | Élevée | 2 | Revue manuelle |
| TMA-SOPHOS-4.3 | Ensure Zero-day protection is enabled for Email Protection and set to MTA modesophos · Niveau 2 | sophos | Élevée | 2 | Revue manuelle |
| TMA-SOPHOS-4.5 | Ensure MDR Threat Feeds is enabledsophos · Niveau 2 | sophos | Élevée | 2 | Revue manuelle |
| TMA-SOPHOS-4.6 | Ensure Third-party Threat Feeds is enabledsophos · Niveau 2 | sophos | Élevée | 2 | Revue manuelle |
| TMA-SOPHOS-5.2 | Ensure SSL/TLS inspection rules is enabled to all relevant firewall policiessophos · Niveau 2 | sophos | Élevée | 2 | Revue manuelle |
| TMA-SOPHOS-5.4 | Ensure Intrusion Prevention(IPS) policy is configured on active firewall rulessophos · Niveau 2 | sophos | Élevée | 2 | Revue manuelle |
| TMA-SOPHOS-5.8 | Ensure Firewall Rules with SMB, Netbios, RDP and other unencrypted protocols should not be directly accessible from WAN Zonesophos · Niveau 1 | sophos | Élevée | 1 | Revue manuelle |
| TMA-SOPHOS-5.10 | Ensure No Firewall Rules with source 'ANY', service 'ANY' and destination 'ANY' from 'WAN' Zonesophos · Niveau 1 | sophos | Élevée | 1 | Revue manuelle |
| TMA-SOPHOS-1.1.3 | Ensure NTP servers are configured appropriatelysophos · Niveau 1 | sophos | Moyenne | 1 | Revue manuelle |
| TMA-SOPHOS-1.1.7 | Ensure valid certificate is set for web browser used to access Webadmin interfacesophos · Niveau 2 | sophos | Moyenne | 2 | Revue manuelle |
| TMA-SOPHOS-1.2.2 | Ensure notification is configured to send system and security eventssophos · Niveau 1 | sophos | Moyenne | 1 | Revue manuelle |
| TMA-SOPHOS-2.1 | Ensure Firewall rules are configured to identify users before authorizing accesssophos · Niveau 2 | sophos | Moyenne | 2 | Revue manuelle |
| TMA-SOPHOS-3.1 | Ensure "Fully Synchronized" High Availability peer is configuredsophos · Niveau 2 | sophos | Moyenne | 2 | Revue manuelle |