Sophos Firewall
TMA-SOPHOS-5.12
Ensure Sophos DNS protection is configured
説明
Sophos DNS protection is a cloud-based service that blocks access to malicious or unwanted domains using real-time threat intelligence from SophosLabs. This method provides enhanced web security without requiring a third-party DNS solution. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).
チェック方法
監査方法: 手動レビュー
To use DNS protection in Sophos Firewall, the firewall should be connected to and managed by Sophos Central. There are two parts to configure the DNS protection 1. Sophos Central Configuration. 2. Sophos Firewall configuration. 1.Sophos Central configuration, Login to Sophos Central Dashboard to which the firewall is registered and managed from. (Full steps: CIS 5.12.)
修正方法
修正方法: ガイダンスまたは IaC パッチ
To use DNS protection in Sophos Firewall, the firewall should be connected to and managed by Sophos Central. There are two parts to configure the DNS protection 1. Sophos Central Configuration. 2. Sophos Firewall configuration. 1.Sophos Central configuration, Login to Sophos Central Dashboard to which the firewall is registered and managed from. Navigate to 'My Products' > 'DNS Protection' > 'Locations' > Click on 'Add' > Enter the name and description for the location > In 'IPv4 addresses or FQDNs' > Add the firewall WAN Interface IP or the firewall hostname registered with DDNS providers > Click on 'Save.' In Sophos Central, copy the DNS Protection IP addresses; these IP addresses need to be configured in Sophos Firewall to be use DNS Protection. To copy the DNS Protection IP address, navigate to 'My Products ' > ' DNS Protection ' > ' Installers' > Next to IP addresses, click 'Copy.' 2. Sophos Firewall Configuration Navigate to 'Configure' > 'Network' > 'DNS' > 'DNS Configuration' > 'IPv4' > 'Static DNS' > In 'DNS 1' enter one of the IP addresses copied from Sophos Central to be used as a primary DNS Protection Server. > In 'DNS 2' enter the other IP addresses copied from Sophos Central to be used as a secondary DNS Protection Server. We recommend you don't add any other DNS server in DNS 3. If the firewall switches to the third DNS server, you will lose the protection offered by DNS protection. Navigate to 'Configure' > 'Network' > 'DNS' > 'DNS Configuration' > 'IPv6' > 'Static DNS' > Leave DNS 1 , DNS 2, DNS 3 blank (see the CIS PDF for the remaining steps)
プロパティ
- オペレーティングシステム
- すべて
- タグ
- sophoshardening
- 参照
- CIS Sophos Firewall v22 Benchmark v1.0.0 - 5.12 Ensure Sophos DNS protection is configured