TMA-SOPHOS-2.2

Ensure Encrypted connection is used in connecting external Active Directory and LDAP

高レベル 1手動レビューsophos

説明

Microsoft has made secure connections mandatory for recent server versions. The security of the communication can be significantly improved for LDAP simple binds that are performed over SSL/TLS connections. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

Navigate to 'Configure > Authentication > Servers > Edit' and verify that 'Connection security' is selected with either 'SSL/TLS' or 'STARTTLS' is used and 'Validate server certificate' is checked.

修正方法

修正方法: ガイダンスまたは IaC パッチ

Navigate to 'Configure > Authentication > Servers > Edit or Add' and set 'Connection security' with either 'SSL/TLS' or 'STARTTLS' and 'Validate server certificate' is checked.

プロパティ

オペレーティングシステム: すべて
タグ: sophosauthentication
参照: CIS Sophos Firewall v22 Benchmark v1.0.0 - 2.2 Ensure Encrypted connection is used in connecting external Active Directory and LDAP