Ensure Wireless Protection is configured with secure configuration

SrednjaNivo 1Ručni pregledsophos

Opis

When Sophos firewall is used as Wireless controller to manage Sophos Access Points, it is important to tighten configuration to prevent unauthorized access to the Wireless network. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

Navigate to 'Protect > Wireless > Wireless networks' Verify the existing 'Wireless' settings with 'Security mode', either 'WPA2 Personal' or 'WPA2 Enterprise' should be used. Under 'Advanced settings' Verify that 'Encryption' is set to 'AES[secure]' Verify that 'Time-based access' is 'Enable' with 'Select active time' and appropriate schedule to limit the availability. Verify that 'Client isolation' is 'Enabled'.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Navigate to 'Protect > Wireless > Wireless networks' Set the existing 'Wireless' settings with 'Security mode', either 'WPA2 Personal' or 'WPA2 Enterprise'. Under 'Advanced settings' Set 'Encryption' to 'AES[secure]' Set 'Time-based access' to 'Enable' with 'Select active time' and configure appropriate schedule to limit the availability. Set 'Client isolation' to 'Enabled'.

Svojstva

Operativni sistemi: Bilo koji
Oznake: sophoshardening
Referenca: CIS Sophos Firewall v22 Benchmark v1.0.0 - 5.9 Ensure Wireless Protection is configured with secure configuration