Ensure Privileged and Administrative Roles Are Restricted to Known IP Addresses

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

1. Confirm that LBAC is enabled for the Fusion environment. 2. Sign in to Fusion Security Console with appropriate privileges. 3. Navigate to Roles, Search, IT Security Manager (and other privileged roles). 4. Open the role and go to the Administration tab. 5. Verify that the checkbox Enable Role for Access from All IP Addresses is not selected. 6. Confirm that privileged roles are associated with the intended network perimeter or known IP range within LBAC configuration.

조치 방법

조치 방식: 가이드 또는 인프라 패치

1. Sign in to Fusion Security Console with an administrative account. 2. Navigate to Roles, Search, IT Security Manager (or equivalent privileged roles). 3. Go to the Administration tab and ensure the checkbox Enable Role for Access from All IP Addresses is cleared. 4. Verify that the role is correctly assigned to the appropriate network perimeter under LBAC settings, restricting access to known IP ranges. 5. Test access from a trusted IP and confirm the role remains functional; test from an unapproved IP to confirm access is denied.