Ensure Antivirus Definition Push Updates are Configured

높음레벨 2자동fortigate

설명

Ensure FortiGate is configured to accept antivirus definition push updates. PASS requires the FortiGuard update schedule enabled with frequency automatic. Audited against FortiOS 'show full-configuration' output (run it from the global context on VDOM-enabled units and save the full output); patterns are scoped to the named 'config ... end' block, whose member lines are indented.

점검 방법

감사 방식: 구성 패턴

패턴: (?m)^config system autoupdate schedule\n(?:(?:[ \t]+[^\n]*\n)*?[ \t]+set status enable[ \t]*\n(?:[ \t]+[^\n]*\n)*?[ \t]+set frequency automatic[ \t]*$|(?:[ \t]+[^\n]*\n)*?[ \t]+set frequency automatic[ \t]*\n(?:[ \t]+[^\n]*\n)*?[ \t]+set status enable[ \t]*$)

조치 방법

조치 방식: 가이드 또는 인프라 패치

config system autoupdate schedule set status enable set frequency automatic end # CIS guidance: On GUI: 1. Access the FortiGate administrative web access page and go to System > FortiGuard. 2. Under "FortiGuard Updates" ensure that the "Scheduled updates" is set to "Automatic". On CLI: config system autoupdate schedule set status enable set frequency automatic end

속성

운영 체제: 모두
태그: fortigatethreat-prevention
참고 자료: CIS FortiGate 7.4.x Benchmark v1.0.1 - 4.2.1 Ensure Antivirus Definition Push Updates are Configured

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target fortigate --level 2