TMA-SOPHOS-2.2
Ensure Encrypted connection is used in connecting external Active Directory and LDAP
Opis
Microsoft has made secure connections mandatory for recent server versions. The security of the communication can be significantly improved for LDAP simple binds that are performed over SSL/TLS connections. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).
Kako se proverava
Metod provere: Ručni pregled
Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.
Navigate to 'Configure > Authentication > Servers > Edit' and verify that 'Connection security' is selected with either 'SSL/TLS' or 'STARTTLS' is used and 'Validate server certificate' is checked.
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Navigate to 'Configure > Authentication > Servers > Edit or Add' and set 'Connection security' with either 'SSL/TLS' or 'STARTTLS' and 'Validate server certificate' is checked.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- sophosauthentication
- Referenca
- CIS Sophos Firewall v22 Benchmark v1.0.0 - 2.2 Ensure Encrypted connection is used in connecting external Active Directory and LDAP