TMA-SOPHOS-2.2

Ensure Encrypted connection is used in connecting external Active Directory and LDAP

높음레벨 1수동 검토sophos

설명

Microsoft has made secure connections mandatory for recent server versions. The security of the communication can be significantly improved for LDAP simple binds that are performed over SSL/TLS connections. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Navigate to 'Configure > Authentication > Servers > Edit' and verify that 'Connection security' is selected with either 'SSL/TLS' or 'STARTTLS' is used and 'Validate server certificate' is checked.

조치 방법

조치 방식: 가이드 또는 인프라 패치

Navigate to 'Configure > Authentication > Servers > Edit or Add' and set 'Connection security' with either 'SSL/TLS' or 'STARTTLS' and 'Validate server certificate' is checked.

속성

운영 체제: 모두
태그: sophosauthentication
참고 자료: CIS Sophos Firewall v22 Benchmark v1.0.0 - 2.2 Ensure Encrypted connection is used in connecting external Active Directory and LDAP