Ensure that scheduled vulnerability scan is enabled on all servers

中レベル 1手動レビューalibaba

説明

Ensure that scheduled vulnerability scan is enabled on all servers. Be sure that vulnerability scan is performed periodically to discover system vulnerabilities in time. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

1. Logon to Security Center Console. 2. Select Vulnerabilities. 3. Click Settings. 4. Ensure that all type of vulnerabilities is enabled. 5. Ensure that High and Medium vulnerabilities scan level are enabled. Expected state: 1. Login to Security Center Console. 2. Select Vulnerabilities. 3. Click Settings. 4. Apply all type of vulnerabilities. 5. Enable High and Medium vulnerabilities scan level.

修正方法

修正方法: ガイダンスまたは IaC パッチ

1. Login to Security Center Console. 2. Select Vulnerabilities. 3. Click Settings. 4. Apply all type of vulnerabilities. 5. Enable High and Medium vulnerabilities scan level.

プロパティ

オペレーティングシステム: すべて
タグ: alibabasecurity-center
参照: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 8.7 Ensure that scheduled vulnerability scan is enabled on all servers