Enable Global Strong Encryption

VisokaNivo 2Automatskafortiswitch

Opis

Enable FortiSwitchOS to only use strong encryption and allow only strong ciphers for communication PASS requires set strong-crypto enable. Audited against FortiSwitchOS 'show full-configuration' output (standalone FortiSwitch, saved in full); patterns are scoped to the named 'config ... end' block, whose member lines are indented.

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: (?m)^config system global\n(?:[ \t]+[^\n]*\n)*?[ \t]+set strong-crypto enable[ \t]*$

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

config system global set strong-crypto enable end # CIS guidance: CLI: config system global set strong-crypto enable end

Svojstva

Operativni sistemi: Bilo koji
Oznake: fortiswitchcrypto
Referenca: CIS FortiSwitch Benchmark v1.0.0 - 1.5.5.1 Enable Global Strong Encryption

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target fortiswitch --level 2