TMAegis베타
cisco-ftd 관련 규칙 더 보기

Cisco Secure Firewall (FTD)

TMA-CISCO-FTD-1.3.4

Regularly update the FMC Server Version

보통레벨 1수동 검토cisco-ftd

설명

The Firepower Infrastructure OS Components are updated frequently by Cisco. It is recommended that the version of the FMC Server be checked monthly at a minimum, and updated if recommended. CIS assessment: Manual. Reported as SKIP with review instructions.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

CIS assessment: Manual. Navigate to Overview > Dashboard > Status Verify that the software version is at the desired level

조치 방법

조치 방식: 가이드 또는 인프라 패치

! Before updating, it is recommended that the release notes for the target version are reviewed to assess any potential new issues that may be introduced, or any new functions or behavior changes that need to be accounted for. The release notes will also often have update time estimates, which can help in appropriately scheduling maintenance windows. It is also recommended that a formal testing procedure be written for Firepower, and that this procedure is executed after each update to ensure full functionality post update. To update FMC: - Navigate to System (Gear Icon) > Updates > Product Updates - If needed, upload the required FMC Update to the update list - Choose "Deploy" on the required update - Select the FMC Server that is the target of the update - Choose "Launch Readiness Check". Note that this can take an extended period of time. - If this completes successfully, Choose "Install". Note that this can take an extended period of time, and will frequently take the FMC Server out of service and/or reboot the server. It is recommended that this only be done in a scheduled maintenance window. - Execute your testing procedure to ensure that there are no functional changes that will affect the people or clients that use systems that are protected by your FMC installation.

속성

운영 체제
모두
태그
cisco-ftdnetworkhardening
참고 자료
CIS Cisco Firepower Threat Defense Benchmark v1.0.0 - 1.3.4 Regularly update the FMC Server Version