Ensure notification is configured to send system and security events

보통레벨 1수동 검토sophos

설명

This recommendation ensures that administrator receives notification on system events, reports and security incidents either via email or SNMP Traps. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Navigate to 'System > Administration > Notification settings > Mail server settings'. Verify that 'Send notification via > Built-in email server' or 'External email server' is checked and configure email settings appropriately. Navigate to 'Configure > System services > Notification list'. Verify that appropriate admin, system and security events are checked to send email notification and/or SNMP traps.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Navigate to 'System > Administration > Notification settings'. When 'built-in email server' is used. Set the 'from email address' of the sender. Set the 'Send notifications to email address' of the administrators' email address. Set 'Management interface IP address' to send notification from. When 'External mail server' is used. Set the 'Mail server IPv4 address/FQDN – Port' is set to the outgoing mail server. Set 'username' and 'password' to authenticate to the outgoing mail server. Set 'connection security' to 'STARTTLS' or 'SSL/TLS'. Navigate to 'Configure > System services > Notification list'. Set the appropriate admin, system and security events to send email notification and/or SNMP traps.

속성

운영 체제: 모두
태그: sophoslogging
참고 자료: CIS Sophos Firewall v22 Benchmark v1.0.0 - 1.2.2 Ensure notification is configured to send system and security events