Ensure Geolocation Filtering with WAF for SaaS is enforced

보통레벨 2수동 검토oracle-saas

설명

Geolocation filtering in WAF for Oracle Fusion Applications restricts access based on the source country or region of incoming requests. WAF policies can be configured to allow or block traffic from selected geographies, helping organizations limit access to regions where legitimate users are located. Restricting access to only the countries or regions where the organization operates reduces unnecessary exposure to malicious traffic. Reported as a manual review item: these Fusion/EPM/OCI IAM settings are reviewed in the Oracle SaaS and OCI consoles or reports.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

1. Review Service Request (SR) records with Oracle SaaS Operations to confirm that geolocation filtering has been enabled. 2. Verify the countries or regions included in the allow or block lists match organizational requirements. 3. Optionally log a new Service Request with Oracle SaaS Operations to confirm the current WAF policy configuration. 4. Validate functionality by attempting access from at least one blocked country and confirming that requests are denied.

조치 방법

조치 방식: 가이드 또는 인프라 패치

1. Submit a Service Request to Oracle SaaS Operations requesting geolocation filtering to be enabled for the Fusion environment. 2. Provide Oracle with the list of countries or regions that should be allowed or blocked. 3. After configuration by Oracle, confirm that the rules are applied and enforced. 4. Test by accessing Fusion from both allowed and blocked regions to ensure expected behavior. 5. Document exceptions if broader access must remain temporarily enabled.

속성

운영 체제: 모두
태그: oracle-saasnetwork
참고 자료: CIS Oracle SaaS Cloud Applications Benchmark v1.0.0 - 2.5 Ensure Geolocation Filtering with WAF for SaaS is enforced