TMA-SOPHOS-1.1.8
Ensure MFA for Web console access and remote access VPN
설명
MFA adds an extra layer of security to the firewall's web console access. Enforcing MFA significantly reduces the risk of unauthorized configuration changes to the firewall. Similarly, enforcing MFA for the VPN connections adds an additional verification factor beyond passwords, ensuring that only verified users can establish a VPN session Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
Navigate to ' Configure ' > 'Authentication' > 'Multi-factor authentication' > 'Multi-factor authentication settings' Select ' Specific Users and groups ' > ' Add the user or group ' Enable ' Generate OTP toles with next sign-in ' for automatic creation of OTP tokens. To enable MFA for Web admin console access, Enable Require MFA for 'Web admin console' To enable MFA for remote access VPN (IPsec and SSL VPN), Enable Require MFA for 'SSL VPN remote access' and 'IPSec remote access'
조치 방법
조치 방식: 가이드 또는 인프라 패치
Navigate to ' Configure ' > 'Authentication' > 'Multi-factor authentication' > 'Multi-factor authentication settings' Select ' Specific Users and groups ' > ' Add the user or group ' Enable ' Generate OTP toles with next sign-in ' for automatic creation of OTP tokens. To enable MFA for Web admin console access, Enable Require MFA for 'Web admin console' To enable MFA for remote access VPN (IPsec and SSL VPN), Enable Require MFA for 'SSL VPN remote access' and 'IPSec remote access'
속성
- 운영 체제
- 모두
- 태그
- sophosauthentication
- 참고 자료
- CIS Sophos Firewall v22 Benchmark v1.0.0 - 1.1.8 Ensure MFA for Web console access and remote access VPN