Ensure that scheduled vulnerability scan is enabled on all servers

보통레벨 1수동 검토alibaba

설명

Ensure that scheduled vulnerability scan is enabled on all servers. Be sure that vulnerability scan is performed periodically to discover system vulnerabilities in time. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

1. Logon to Security Center Console. 2. Select Vulnerabilities. 3. Click Settings. 4. Ensure that all type of vulnerabilities is enabled. 5. Ensure that High and Medium vulnerabilities scan level are enabled. Expected state: 1. Login to Security Center Console. 2. Select Vulnerabilities. 3. Click Settings. 4. Apply all type of vulnerabilities. 5. Enable High and Medium vulnerabilities scan level.

조치 방법

조치 방식: 가이드 또는 인프라 패치

1. Login to Security Center Console. 2. Select Vulnerabilities. 3. Click Settings. 4. Apply all type of vulnerabilities. 5. Enable High and Medium vulnerabilities scan level.

속성

운영 체제: 모두
태그: alibabasecurity-center
참고 자료: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 8.7 Ensure that scheduled vulnerability scan is enabled on all servers