Ensure that scheduled vulnerability scan is enabled on all servers

СреднийУровень 1Ручная проверкаalibaba

Описание

Ensure that scheduled vulnerability scan is enabled on all servers. Be sure that vulnerability scan is performed periodically to discover system vulnerabilities in time. Reported as a manual review item: the benchmark audit needs console review or organisational judgement.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

1. Logon to Security Center Console. 2. Select Vulnerabilities. 3. Click Settings. 4. Ensure that all type of vulnerabilities is enabled. 5. Ensure that High and Medium vulnerabilities scan level are enabled. Expected state: 1. Login to Security Center Console. 2. Select Vulnerabilities. 3. Click Settings. 4. Apply all type of vulnerabilities. 5. Enable High and Medium vulnerabilities scan level.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

1. Login to Security Center Console. 2. Select Vulnerabilities. 3. Click Settings. 4. Apply all type of vulnerabilities. 5. Enable High and Medium vulnerabilities scan level.

Свойства

Операционные системы: Любая
Теги: alibabasecurity-center
Источник: CIS Alibaba Cloud Foundation Benchmark v2.0.1 - 8.7 Ensure that scheduled vulnerability scan is enabled on all servers