Ensure Web Policy is configured to block inappropriate URLs, Malware and content scanning is configured correctly.

MédiaNível 2Revisão manualsophos

Descrição

Configure Web Policy to control users' web browsing activities, block inappropriate web categories and enforce malware scanning for FTP and HTTP(S) traffic. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

Como é verificado

Método de auditoria: Revisão manual

Esta recomendação não pode ser verificada automaticamente. Uma varredura a lista com estas instruções quando você passa --include-manual.

Navigate to 'Protect > Web'. Verify that configured web policies have categories with 'objectionable classification' is set to block. Ensure that Status is set to 'ON' with the block rule is on top. Within the web policy 'Advanced settings > Enable logging and reporting' is checked. Navigate to 'Protect > Web > General settings > Protection > Malware and content scanning'. Verify that 'Action on malware scan failure' is set to 'Block(best protection)'. Verify that 'Block potentially unwanted applications' is checked. Navigate to 'Protect > Web > Exceptions'. (Full steps: CIS 5.1.)

Como é corrigido

Método de correção: Orientação ou patch de infraestrutura

Navigate to 'Protect > Web' Set the web policy to block categories with 'objectionable classification' and change the status to 'ON'. Within the web policy set the 'Enable logging and reporting'. Navigate to 'Protect > Web > General settings > Protection > Malware and content scanning' Action on 'malware scan failure' is set to 'Block(best protection)'. Enable 'Block potentially unwanted applications'. Navigate to 'Protect > Web > Exceptions' Remove/edit 'exceptions' with 'URL patterns, website categories and destination IP address (website address)' that could reduce security effectiveness to the 'source IP address (end-users' address)'.

Propriedades

Sistemas operacionais: Qualquer
Tags: sophosthreat-prevention
Referência: CIS Sophos Firewall v22 Benchmark v1.0.0 - 5.1 Ensure Web Policy is configured to block inappropriate URLs, Malware and content scanning is configured correctly.