Ensure admin session 'logout' for inactivity and 'block' is configured for failed sign-in

VisokaNivo 1Ručni pregledsophos

Opis

Set to automatically sign out the administrator from the web admin console after the configured time of inactivity. (Default: 10 minutes) Set to block sign-in to the web admin console and CLI after the maximum numbers of failed sign-in attempts and the duration (in seconds) which attempts can be made from a single IP address. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Navigate to 'System > Administration > Admin and user settings > Login security' Verify that 'Logout admin session after _ Minutes of inactivity' is checked and configured with no more than 10 minutes of default value. Verify that 'Block login' is checked. Verify that 'After _ unsuccessful attempts from same IP in __ Seconds (1- 120)' is configured with values of 5 and 60 respectively. Verify that 'Block login access for __ minutes [1-60]' is set to at least 5.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Navigate to 'System > Administration > Admin and user settings > Login security'. Set 'Logout admin session after _ Minutes of inactivity' is checked and configured with no more than 10 minutes of default value. Set 'Block login' is checked. Set 'After _ unsuccessful attempts from same IP in __ Seconds (1-120)' is configured with values of 5 and 60 respectively. Set 'Block login access for __ minutes [1-60]' to at least 5

Svojstva

Operativni sistemi: Bilo koji
Oznake: sophosauthentication
Referenca: CIS Sophos Firewall v22 Benchmark v1.0.0 - 1.1.1 Ensure admin session 'logout' for inactivity and 'block' is configured for failed sign-in