TMA-ORACLE-DB-2.2.9
Ensure 'SQLNET.ENCRYPTION_TYPES_SERVER' Is Set To AES256
설명
The SQLNET.ENCRYPTION_TYPES_SERVER parameter specifies the encryption algorithms that the server enforces for database connections. This setting allows you to ensure that all data transmitted between the client and the database is encrypted using strong, secure algorithms. Manual in the benchmark: SQLNET.ENCRYPTION_TYPES_SERVER in sqlnet.ora should be exactly (AES256). Default: All available algorithms
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
On the Linux platform, execute the following shell command to audit this recommendation. filePath="$ORACLE_HOME/network/admin/sqlnet.ora" if grep -qi "^\s*SQLNET\.ENCRYPTION_TYPES_SERVER\s*=\s*(AES256)" "$filePath"; then # This is compliant. : elif grep -qi "^#.*SQLNET\.ENCRYPTION_TYPES_SERVER" "$filePath"; then echo "The parameter is commented out." elif grep -qi "^#.*SQLNET\.ENCRYPTION_TYPES_SERVER\s*=\s*,.*" "$filePath"; then echo "Multiple encryption types are specified." elif grep -qi "SQLNET\.ENCRYPTION_TYPES_SERVER" "$filePath"; then grep -i "SQLNET\.ENCRYPTION_TYPES_SERVER" ...
조치 방법
조치 방식: 가이드 또는 인프라 패치
To remediate this recommendation, set SQLNET.ENCRYPTION_TYPES_SERVER to AES256. SQLNET.ENCRYPTION_TYPES_SERVER=(AES256)
속성
- 운영 체제
- 모두
- 태그
- oracle-dbdatabaseoraclemanual
- 참고 자료
- CIS Oracle Database 23ai Benchmark v1.1.0 - 2.2.9 Ensure 'SQLNET.ENCRYPTION_TYPES_SERVER' Is Set To AES256