Ensure Antivirus Definition Push Updates are Configured

VisokaNivo 2Automatskafortigate

Opis

Ensure FortiGate is configured to accept antivirus definition push updates. PASS requires the FortiGuard update schedule enabled with frequency automatic. Audited against FortiOS 'show full-configuration' output (run it from the global context on VDOM-enabled units and save the full output); patterns are scoped to the named 'config ... end' block, whose member lines are indented.

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: (?m)^config system autoupdate schedule\n(?:(?:[ \t]+[^\n]*\n)*?[ \t]+set status enable[ \t]*\n(?:[ \t]+[^\n]*\n)*?[ \t]+set frequency automatic[ \t]*$|(?:[ \t]+[^\n]*\n)*?[ \t]+set frequency automatic[ \t]*\n(?:[ \t]+[^\n]*\n)*?[ \t]+set status enable[ \t]*$)

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

config system autoupdate schedule set status enable set frequency automatic end # CIS guidance: On GUI: 1. Access the FortiGate administrative web access page and go to System > FortiGuard. 2. Under "FortiGuard Updates" ensure that the "Scheduled updates" is set to "Automatic". On CLI: config system autoupdate schedule set status enable set frequency automatic end

Svojstva

Operativni sistemi: Bilo koji
Oznake: fortigatethreat-prevention
Referenca: CIS FortiGate 7.4.x Benchmark v1.0.1 - 4.2.1 Ensure Antivirus Definition Push Updates are Configured

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target fortigate --level 2