Ensure Web Policy is configured to block inappropriate URLs, Malware and content scanning is configured correctly.

보통레벨 2수동 검토sophos

설명

Configure Web Policy to control users' web browsing activities, block inappropriate web categories and enforce malware scanning for FTP and HTTP(S) traffic. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

Navigate to 'Protect > Web'. Verify that configured web policies have categories with 'objectionable classification' is set to block. Ensure that Status is set to 'ON' with the block rule is on top. Within the web policy 'Advanced settings > Enable logging and reporting' is checked. Navigate to 'Protect > Web > General settings > Protection > Malware and content scanning'. Verify that 'Action on malware scan failure' is set to 'Block(best protection)'. Verify that 'Block potentially unwanted applications' is checked. Navigate to 'Protect > Web > Exceptions'. (Full steps: CIS 5.1.)

조치 방법

조치 방식: 가이드 또는 인프라 패치

Navigate to 'Protect > Web' Set the web policy to block categories with 'objectionable classification' and change the status to 'ON'. Within the web policy set the 'Enable logging and reporting'. Navigate to 'Protect > Web > General settings > Protection > Malware and content scanning' Action on 'malware scan failure' is set to 'Block(best protection)'. Enable 'Block potentially unwanted applications'. Navigate to 'Protect > Web > Exceptions' Remove/edit 'exceptions' with 'URL patterns, website categories and destination IP address (website address)' that could reduce security effectiveness to the 'source IP address (end-users' address)'.

속성

운영 체제: 모두
태그: sophosthreat-prevention
참고 자료: CIS Sophos Firewall v22 Benchmark v1.0.0 - 5.1 Ensure Web Policy is configured to block inappropriate URLs, Malware and content scanning is configured correctly.