Ensure automatic forwarding options are disabled

中レベル 1手動レビューgoogle-workspace

説明

You should disable automatic forwarding to prevent users from auto-forwarding mail. In the event that an attacker gains control of an end-user account they could create rules to ex-filtrate data from your environment.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under End User Access - Automatic forwarding, ensure Allow users to automatically forward incoming email to another address is unchecked

修正方法

修正方法: ガイダンスまたは IaC パッチ

To verify this setting via the Google Admin Console: 1. Log in to https://admin.google.com as an administrator 2. Select Apps 3. Select Google Workspace 4. Select Gmail 5. Under End User Access - Automatic forwarding, set Allow users to automatically forward incoming email to another address to unchecked 6. Select Save

プロパティ

オペレーティングシステム: すべて
タグ: google-workspacesaas
参照: CIS Google Workspace Foundations Benchmark v1.4.0 - 3.1.3.5.2 Ensure automatic forwarding options are disabled