TMA-SOPHOS-1.1.7

Ensure valid certificate is set for web browser used to access Webadmin interface

中レベル 2手動レビューsophos

説明

Default HTTPS port 4444 is used to access Sophos Firewall's Webadmin interface. HTTPS certificate used to secure the administrative session should satisfy the following criteria: 1. A valid certificate from a trusted source should be used. While a certificate from a trusted Public Certificate Authority is certainly valid, one from a trusted Private Certificate Authority is absolutely acceptable for this purpose. 2. The certificate should have a valid date. It should not have a "to" date in the past (it should not be expired), and should not have a "from" date in the future. 3. The certificate should use an acceptable cipher and encryption level. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Navigate to 'System > Certificates > Certificates'. Verify that the certificate used to secure HTTPS sessions meets the criteria by reviewing the appropriate certificate. Navigate to 'System > Administration > Admin settings > Admin console and end-user interaction > Certificate'. Verify that correct Certificate is used for Webadmin, user portal, captive portal and SPX reply portal.

修正方法

修正方法: ガイダンスまたは IaC パッチ

If a new administrative Certificate is needed, acquire a Certificate that meets the stated criteria and upload it to the Sophos Firewall. Optionally, download the appliance Certificate Authority to the web browser used for administration. Navigate to 'System > Certificates > Certificates > Add' Import an appropriate Certificate for your administrative session, from a trusted Certificate Authority. Navigate to 'System > Administration > Admin settings > Admin console and end-user interaction > Certificate' Choose the correct certificate to use for the web based administrative session.

プロパティ

オペレーティングシステム: すべて
タグ: sophosauthentication
参照: CIS Sophos Firewall v22 Benchmark v1.0.0 - 1.1.7 Ensure valid certificate is set for web browser used to access Webadmin interface