Encrypt Log Transmission to FortiAnalyzer / FortiManager

VisokaNivo 1Automatskafortigate

Opis

Enable encryption for logs that are sent to FortiAnalyzer or FortiManager. PASS requires FortiAnalyzer logging with reliable enable and enc-algorithm high. Audited against FortiOS 'show full-configuration' output (run it from the global context on VDOM-enabled units and save the full output); patterns are scoped to the named 'config ... end' block, whose member lines are indented.

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: (?m)^config log fortianalyzer setting\n(?:(?:[ \t]+[^\n]*\n)*?[ \t]+set reliable enable[ \t]*\n(?:[ \t]+[^\n]*\n)*?[ \t]+set enc-algorithm high[ \t]*$|(?:[ \t]+[^\n]*\n)*?[ \t]+set enc-algorithm high[ \t]*\n(?:[ \t]+[^\n]*\n)*?[ \t]+set reliable enable[ \t]*$)

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

config log fortianalyzer setting set reliable enable set enc-algorithm high end # CIS guidance: Secure log transfer settings can only be configured on CLI: config log fortianalyzer setting set reliable enable set enc-algorithm high end

Svojstva

Operativni sistemi: Bilo koji
Oznake: fortigatelogging
Referenca: CIS FortiGate 7.4.x Benchmark v1.0.1 - 7.3.1 Encrypt Log Transmission to FortiAnalyzer / FortiManager

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target fortigate