TMAegis
flasharray 관련 규칙 더 보기

TMA-FLASHARRAY-2.9

Ensure product diagnostic tests for environmental integrations are run periodically

보통레벨 1수동 검토flasharray

설명

For many environmental integrations mentioned in this section, there exists FlashArray functionality to detect that your configuration is still working. Everpure recommends that you periodically run the product diagnostics tests for the following configurations: ; SAML ; LDAP ; Active Directory ; Syslog ; SMTP Email delivery to alert watchers ; SNMP delivery to SNMP managers Manual review in the Purity//FA GUI or CLI (organization-specific or per-object evidence).

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

From the CLI: ; Request evidence from your monitoring or automation teams that a script periodically connects to the array to execute configuration test commands (e.g., puresso saml2 test, pureds test, purelog syslog test, purealert watcher test, and purearray test ntp).

조치 방법

조치 방식: 가이드 또는 인프라 패치

To align with the security recommendations, implement an automated script or a manual maintenance schedule to continuously verify that environmental integrations are fully functional. From the GUI: ; Establish a periodic manual review process to execute available GUI diagnostic tests. ; Test Directory Services: Navigate to Settings > Access > Users and Policies. In the Directory Service panel, click Test to verify that URIs resolve and the array can bind to the LDAP/AD tree. ; Test SAML2 SSO: Navigate to Settings > Access > Users and Policies.

속성

운영 체제
모두
태그
flasharraystorageencryption
참고 자료
CIS Everpure FlashArray Purity 6.9.x Benchmark v1.0.0 - 2.9 Ensure product diagnostic tests for environmental integrations are run periodically