Sophos Firewall
TMA-SOPHOS-1.2.2
Ensure notification is configured to send system and security events
Descrição
This recommendation ensures that administrator receives notification on system events, reports and security incidents either via email or SNMP Traps. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).
Como é verificado
Método de auditoria: Revisão manual
Navigate to 'System > Administration > Notification settings > Mail server settings'. Verify that 'Send notification via > Built-in email server' or 'External email server' is checked and configure email settings appropriately. Navigate to 'Configure > System services > Notification list'. Verify that appropriate admin, system and security events are checked to send email notification and/or SNMP traps.
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
Navigate to 'System > Administration > Notification settings'. When 'built-in email server' is used. Set the 'from email address' of the sender. Set the 'Send notifications to email address' of the administrators' email address. Set 'Management interface IP address' to send notification from. When 'External mail server' is used. Set the 'Mail server IPv4 address/FQDN – Port' is set to the outgoing mail server. Set 'username' and 'password' to authenticate to the outgoing mail server. Set 'connection security' to 'STARTTLS' or 'SSL/TLS'. Navigate to 'Configure > System services > Notification list'. Set the appropriate admin, system and security events to send email notification and/or SNMP traps.
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- sophoslogging
- Referência
- CIS Sophos Firewall v22 Benchmark v1.0.0 - 1.2.2 Ensure notification is configured to send system and security events