Каталог правил
Просматривайте все правила укрепления защиты в каталоге. Фильтруйте по платформе, критичности, уровню профиля и возможности автоматической проверки.
Найдено 42 правилаиз 16 927Страница 1 из 2
| ID | Название | Платформа | Критичность | Уровень | Проверка |
|---|---|---|---|---|---|
| TMA-SHAREPOINT-1.2 | Ensure that the SharePoint Central Administration Site is TLS- enabledsharepoint · Уровень 1 | sharepoint | Высокий | 1 | Ручная проверка |
| TMA-SHAREPOINT-2.2 | Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges for the local server.sharepoint · Уровень 1 | sharepoint | Высокий | 1 | Автоматическая |
| TMA-SHAREPOINT-2.3 | Ensure the SharePoint setup account is configured with the minimum privileges in Active Directory.sharepoint · Уровень 1 | sharepoint | Высокий | 1 | Ручная проверка |
| TMA-SHAREPOINT-2.4 | Ensure the SharePoint setup account is configured with the minimum privileges on the SQL server.sharepoint · Уровень 1 | sharepoint | Высокий | 1 | Ручная проверка |
| TMA-SHAREPOINT-2.5 | Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges on the SQL server.sharepoint · Уровень 1 | sharepoint | Высокий | 1 | Ручная проверка |
| TMA-SHAREPOINT-2.7 | Ensure the SharePoint Central Administration site is not accessible from Extranet or Internet connectionssharepoint · Уровень 1 | sharepoint | Высокий | 1 | Ручная проверка |
| TMA-SHAREPOINT-3.5 | Ensure that SharePoint specific malware (i.e. anti-virus) protection software is integrated and configuredsharepoint · Уровень 1 | sharepoint | Высокий | 1 | Автоматическая |
| TMA-SHAREPOINT-3.11 | Ensure that the SharePoint Central Administration interface is not hosted in the DMZ.sharepoint · Уровень 1 | sharepoint | Высокий | 1 | Ручная проверка |
| TMA-SHAREPOINT-4.4 | Ensure Anonymous authentication is deniedsharepoint · Уровень 1 | sharepoint | Высокий | 1 | Ручная проверка |
| TMA-SHAREPOINT-7.3 | Ensure compilation or scripting of database pages via the PageParserPaths elements is not allowedsharepoint · Уровень 1 | sharepoint | Высокий | 1 | Автоматическая |
| TMA-SHAREPOINT-FARM-ADMINS | Ensure Farm Administrators group membership is restrictedsharepoint · Уровень 1 | sharepoint | Высокий | 1 | Ручная проверка |
| TMA-SHAREPOINT-HTTPS-ONLY | Ensure all web applications use HTTPSsharepoint · Уровень 1 | sharepoint | Высокий | 1 | Автоматическая |
| TMA-SHAREPOINT-SERVICE-ACCOUNTS | Ensure web application pools do not run as the farm accountsharepoint · Уровень 1 | sharepoint | Высокий | 1 | Автоматическая |
| TMA-SHAREPOINT-1.1 | Ensure access to SharePointEmailws.asmx is limited to only the server farm accountsharepoint · Уровень 1 | sharepoint | Средний | 1 | Ручная проверка |
| TMA-SHAREPOINT-1.3 | Ensure specific whitelisted IP addresses, IP address ranges, and/or domains are setsharepoint · Уровень 1 | sharepoint | Средний | 1 | Ручная проверка |
| TMA-SHAREPOINT-1.4 | Ensure that the underlying Internet Information Services (IIS) Authentication module is set to use Kerberos as its Authentication Providersharepoint · Уровень 1 | sharepoint | Средний | 1 | Ручная проверка |
| TMA-SHAREPOINT-2.1 | Ensure 'Blocked File Types' is configured to match the enterprise blacklistsharepoint · Уровень 1 | sharepoint | Средний | 1 | Ручная проверка |
| TMA-SHAREPOINT-2.8 | Ensure Dbcreator and Securityadmin roles are only used as neededsharepoint · Уровень 1 | sharepoint | Средний | 1 | Ручная проверка |
| TMA-SHAREPOINT-3.2 | Ensure SharePoint implements an information system isolation boundary that minimizes the number of non-security functions included within the boundary containing security functions.sharepoint · Уровень 1 | sharepoint | Средний | 1 | Ручная проверка |
| TMA-SHAREPOINT-3.3 | Ensure SharePoint implements security functions as a layered structure minimizing interactions between layers of the design and avoiding any dependence by lower layers on the functionality or correctness of higher layers.sharepoint · Уровень 1 | sharepoint | Средний | 1 | Ручная проверка |
| TMA-SHAREPOINT-3.4 | Ensure SharePoint identifies data type, specification, and usage when transferring information between different security domains so policy restrictions may be applied.sharepoint · Уровень 1 | sharepoint | Средний | 1 | Ручная проверка |
| TMA-SHAREPOINT-3.6 | Ensure that SharePoint is configured with "Strict" browser file handling settingssharepoint · Уровень 1 | sharepoint | Средний | 1 | Автоматическая |
| TMA-SHAREPOINT-3.9 | Ensure that SharePoint application servers are protected by a reverse proxysharepoint · Уровень 1 | sharepoint | Средний | 1 | Ручная проверка |
| TMA-SHAREPOINT-3.10 | Ensure SharePoint database servers are segregated from application server and placed in a secure zone.sharepoint · Уровень 1 | sharepoint | Средний | 1 | Ручная проверка |
| TMA-SHAREPOINT-4.2 | Ensure claims-based authentication is used for all web applications and zones of a SharePoint 2019 farmsharepoint · Уровень 1 | sharepoint | Средний | 1 | Автоматическая |