Sophos Firewall
TMA-SOPHOS-5.1
Ensure Web Policy is configured to block inappropriate URLs, Malware and content scanning is configured correctly.
Описание
Configure Web Policy to control users' web browsing activities, block inappropriate web categories and enforce malware scanning for FTP and HTTP(S) traffic. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).
Как проверяется
Метод проверки: Ручная проверка
Navigate to 'Protect > Web'. Verify that configured web policies have categories with 'objectionable classification' is set to block. Ensure that Status is set to 'ON' with the block rule is on top. Within the web policy 'Advanced settings > Enable logging and reporting' is checked. Navigate to 'Protect > Web > General settings > Protection > Malware and content scanning'. Verify that 'Action on malware scan failure' is set to 'Block(best protection)'. Verify that 'Block potentially unwanted applications' is checked. Navigate to 'Protect > Web > Exceptions'. (Full steps: CIS 5.1.)
Как исправляется
Метод исправления: Рекомендация или патч инфраструктуры
Navigate to 'Protect > Web' Set the web policy to block categories with 'objectionable classification' and change the status to 'ON'. Within the web policy set the 'Enable logging and reporting'. Navigate to 'Protect > Web > General settings > Protection > Malware and content scanning' Action on 'malware scan failure' is set to 'Block(best protection)'. Enable 'Block potentially unwanted applications'. Navigate to 'Protect > Web > Exceptions' Remove/edit 'exceptions' with 'URL patterns, website categories and destination IP address (website address)' that could reduce security effectiveness to the 'source IP address (end-users' address)'.
Свойства
- Операционные системы
- Любая
- Теги
- sophosthreat-prevention
- Источник
- CIS Sophos Firewall v22 Benchmark v1.0.0 - 5.1 Ensure Web Policy is configured to block inappropriate URLs, Malware and content scanning is configured correctly.