TMA-SOPHOS-1.1.9
Ensure MFA for default admin
Opis
Implementing MFA strengthens the security of firewall console access by requiring an additional verification step, helping ensure that only authorized administrators can make changes to firewall configurations. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).
Kako se proverava
Metod provere: Ručni pregled
Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.
Navigate to ' System ' > 'Administration' > 'Device Access ' > 'Multi-factor Authentication for default admin' Turn ' ON ' MFA for default admin MFA doesn't apply to SSH sign-ins, allowing you to recover the account
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Navigate to ' System ' > 'Administration' > 'Device Access ' > 'Multi-factor Authentication for default admin' Turn ' ON ' MFA for default admin MFA doesn't apply to SSH sign-ins, allowing you to recover the account
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- sophosauthentication
- Referenca
- CIS Sophos Firewall v22 Benchmark v1.0.0 - 1.1.9 Ensure MFA for default admin