Ensure Web Management is Set to use HTTPS

VisokaNivo 1Automatskapfsense

Opis

Web Admin Management Portal should only be accessed using HTTPS Protocol. PASS requires <protocol>https</protocol> inside <system><webgui>. Audited against the pfSense config.xml (Diagnostics > Backup & Restore > Download configuration, or /cf/conf/config.xml).

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: <webgui>(?:[^<]|<[^/<]|</[^w<]|</w[^e<]|</we[^b<]|</web[^g<]|</webg[^u<]|</webgu[^i<]|</webgui[^><])*?<protocol>https</protocol>

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

GUI: System > Advanced > Admin Access > webConfigurator > Protocol = HTTPS (SSL/TLS), select a certificate, Save. # CIS guidance: In the GUI: - Navigate to System > Advanced > Admin Access - Select 'HTTPS' in the 'webConfigurator'. - CLIck 'Save'

Svojstva

Operativni sistemi: Bilo koji
Oznake: pfsensemanagement
Referenca: CIS pfSense Firewall Benchmark v1.1.0 - 1.8 Ensure Web Management is Set to use HTTPS

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target pfsense