Ensure Encrypted connection is used in connecting external Active Directory and LDAP

TinggiLevel 1Tinjauan manualsophos

Deskripsi

Microsoft has made secure connections mandatory for recent server versions. The security of the communication can be significantly improved for LDAP simple binds that are performed over SSL/TLS connections. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

Navigate to 'Configure > Authentication > Servers > Edit' and verify that 'Connection security' is selected with either 'SSL/TLS' or 'STARTTLS' is used and 'Validate server certificate' is checked.

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Navigate to 'Configure > Authentication > Servers > Edit or Add' and set 'Connection security' with either 'SSL/TLS' or 'STARTTLS' and 'Validate server certificate' is checked.

Properti

Sistem operasi: Apa saja
Tag: sophosauthentication
Referensi: CIS Sophos Firewall v22 Benchmark v1.0.0 - 2.2 Ensure Encrypted connection is used in connecting external Active Directory and LDAP