Ensure Privileged and Administrative Roles Are Restricted to Known IP Addresses

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

1. Confirm that LBAC is enabled for the Fusion environment. 2. Sign in to Fusion Security Console with appropriate privileges. 3. Navigate to Roles, Search, IT Security Manager (and other privileged roles). 4. Open the role and go to the Administration tab. 5. Verify that the checkbox Enable Role for Access from All IP Addresses is not selected. 6. Confirm that privileged roles are associated with the intended network perimeter or known IP range within LBAC configuration.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

1. Sign in to Fusion Security Console with an administrative account. 2. Navigate to Roles, Search, IT Security Manager (or equivalent privileged roles). 3. Go to the Administration tab and ensure the checkbox Enable Role for Access from All IP Addresses is cleared. 4. Verify that the role is correctly assigned to the appropriate network perimeter under LBAC settings, restricting access to known IP ranges. 5. Test access from a trusted IP and confirm the role remains functional; test from an unapproved IP to confirm access is denied.