TMA-SHAREPOINT-3.5

Ensure that SharePoint specific malware (i.e. anti-virus) protection software is integrated and configured

높음레벨 1자동sharepoint

설명

SharePoint-specific malware (i.e. anti-virus) protection software must be integrated and configured. Prints compliant when the farm antivirus settings scan documents on upload and download and attempt to clean infected documents. A SharePoint-integrated antivirus product must also be installed for the settings to take effect. Run on a SharePoint farm server as a farm administrator; the audit loads the Microsoft.SharePoint.PowerShell snap-in and fails if it cannot.

점검 방법

감사 방식: 셸 명령

shell

$ErrorActionPreference = 'Stop'; if (-not (Get-Command Get-SPFarm -ErrorAction SilentlyContinue)) { Add-PSSnapin Microsoft.SharePoint.PowerShell -ErrorAction Stop }; if (-not (Get-Command Get-SPFarm -ErrorAction SilentlyContinue)) { throw 'SharePoint cmdlets are not available' }; $av = [Microsoft.SharePoint.Administration.SPWebService]::ContentService.AntivirusSettings; if ($null -ne $av -and $av.UploadScanEnabled -eq $true -and $av.DownloadScanEnabled -eq $true -and $av.CleaningEnabled -eq $true) { 'compliant' } else { 'noncompliant' }

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

Install a SharePoint-integrated antivirus product, then Central Administration > Security > Manage antivirus settings: select Scan documents on upload, Scan documents on download and Attempt to clean infected documents.

속성

운영 체제: 모두
태그: sharepointmalware
참고 자료: CIS Microsoft SharePoint 2019 Benchmark v1.0.0 - 3.5 Ensure that SharePoint specific malware (i.e. anti-virus) protection software is integrated and configured

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target sharepoint