Enable TLS server identity discovery

VisokaNivo 1Ručni pregledcisco-ftd

Opis

TLS server identity discovery is the process by which a FTD verifies the identity of the server that is trying to make a secure connection via TLS or SSL. This is vital for ensuring the security and authenticity of the server. Determining that the incoming traffic is originated from a secure server is important to the safety of your network. Enabling TLS server identity discovery allows FTD to determine if the source of traffic is communicating through a secure server. Not reliably checkable from an exported configuration. Reported as SKIP with review instructions.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Not reliably checkable from an exported configuration. Policies > Access Control > Advanced View your access control policies Go to advanced settings Verify TLS Server Identity Discovery is selected

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Policies > Access Control > Advanced Check TLS Server Identity Discovery

Svojstva

Operativni sistemi: Bilo koji
Oznake: cisco-ftdnetworkaaa
Referenca: CIS Cisco Firepower Threat Defense Benchmark v1.0.0 - 2.1.4 Enable TLS server identity discovery