Прегледач правила
Прегледајте свако правило за ојачавање безбедности у каталогу. Филтрирајте по платформи, озбиљности, нивоу профила и томе да ли се провера може аутоматизовати.
Пронађено 36 правилаод 16.927Страница 1 од 2
| ID | Наслов | Платформа | Озбиљност | Ниво | Провера |
|---|---|---|---|---|---|
| TMA-FLASHARRAY-1.6 | Ensure brute-force lockout is set to 3 attempts with a lockout duration of at least 1 hourflasharray · Ниво 1 | flasharray | Висока | 1 | Аутоматска |
| TMA-FLASHARRAY-1.7 | Ensure the password policy enforces 8+ characters, 3+ character groups, and username and dictionary checksflasharray · Ниво 1 | flasharray | Висока | 1 | Аутоматска |
| TMA-FLASHARRAY-3.1 | Ensure NFS export policies restrict client access and enforce secure authentication (no wildcards, root squash, no sys auth)flasharray · Ниво 1 | flasharray | Висока | 1 | Аутоматска |
| TMA-FLASHARRAY-3.2 | Ensure SMB client policies require encryption, restrict client access, and disable anonymous accessflasharray · Ниво 1 | flasharray | Висока | 1 | Аутоматска |
| TMA-FLASHARRAY-4.1 | Ensure manual eradication is disabled and the eradication delay is at least 8 days for production dataflasharray · Ниво 1 | flasharray | Висока | 1 | Аутоматска |
| TMA-FLASHARRAY-1.1 | Ensure a management SAML SSO configuration is created and enabledflasharray · Ниво 1 | flasharray | Средња | 1 | Ручни преглед |
| TMA-FLASHARRAY-1.2 | Ensure a management LDAP/Active Directory service is configured and enabled with at least one group mappedflasharray · Ниво 1 | flasharray | Средња | 1 | Ручни преглед |
| TMA-FLASHARRAY-1.3 | Ensure only authorized local administrative accounts exist and a local emergency-access account is retainedflasharray · Ниво 1 | flasharray | Средња | 1 | Ручни преглед |
| TMA-FLASHARRAY-1.4 | Ensure administrators and directory groups are granted least- privilege roles via management access policiesflasharray · Ниво 1 | flasharray | Средња | 1 | Ручни преглед |
| TMA-FLASHARRAY-1.5 | Ensure SSH key-based authentication is configured for CLI access, preferably sourced from LDAPflasharray · Ниво 1 | flasharray | Средња | 1 | Ручни преглед |
| TMA-FLASHARRAY-1.8 | Ensure OAuth API clients use least-privilege access policies and access-token TTLs of 60 minutes or lessflasharray · Ниво 1 | flasharray | Средња | 1 | Ручни преглед |
| TMA-FLASHARRAY-1.9 | Ensure static REST API tokens are used only when necessary and configured to expire periodicallyflasharray · Ниво 1 | flasharray | Средња | 1 | Ручни преглед |
| TMA-FLASHARRAY-1.10 | Ensure administrative audit logs are forwarded to remote syslog or monitored via the REST APIflasharray · Ниво 1 | flasharray | Средња | 1 | Ручни преглед |
| TMA-FLASHARRAY-1.11 | Ensure administrative session logs are forwarded to remote syslog or monitored via the REST APIflasharray · Ниво 1 | flasharray | Средња | 1 | Ручни преглед |
| TMA-FLASHARRAY-1.12 | Ensure system alerts are actively monitored via remote syslog or email alert watchersflasharray · Ниво 1 | flasharray | Средња | 1 | Ручни преглед |
| TMA-FLASHARRAY-1.13 | Ensure at least one alert watcher is configured to receive alerts of all severitiesflasharray · Ниво 1 | flasharray | Средња | 1 | Аутоматска |
| TMA-FLASHARRAY-1.14 | Ensure at least one remote management syslog server is configuredflasharray · Ниво 1 | flasharray | Средња | 1 | Аутоматска |
| TMA-FLASHARRAY-2.1 | Ensure array TLS certificates are CA-signed, adequately sized, and rotated at least every 90 daysflasharray · Ниво 1 | flasharray | Средња | 1 | Ручни преглед |
| TMA-FLASHARRAY-2.3 | Ensure Active Directory accounts are configured to require TLSflasharray · Ниво 1 | flasharray | Средња | 1 | Ручни преглед |
| TMA-FLASHARRAY-2.4 | Ensure LDAP directory services use LDAPS with a configured CA root of trustflasharray · Ниво 1 | flasharray | Средња | 1 | Аутоматска |
| TMA-FLASHARRAY-2.5 | Ensure syslog servers use TLS with a configured CA root of trustflasharray · Ниво 1 | flasharray | Средња | 1 | Аутоматска |
| TMA-FLASHARRAY-2.6 | Ensure the SMTP relay host is configured with STARTTLS encryption and authenticationflasharray · Ниво 1 | flasharray | Средња | 1 | Аутоматска |
| TMA-FLASHARRAY-2.7 | Ensure SNMP, if enabled, uses SNMPv3 with SHA authentication and AES privacyflasharray · Ниво 1 | flasharray | Средња | 1 | Аутоматска |
| TMA-FLASHARRAY-2.9 | Ensure product diagnostic tests for environmental integrations are run periodicallyflasharray · Ниво 1 | flasharray | Средња | 1 | Ручни преглед |
| TMA-FLASHARRAY-3.3 | Ensure native Active Directory integration is used for NFS and SMB identity and authenticationflasharray · Ниво 1 | flasharray | Средња | 1 | Ручни преглед |