Ensure all the login accounts having specific trusted hosts enabled

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen

(?m)^config system admin\n(?:[ \t]+[^\n]*\n)*?[ \t]+set trusthost1 0\.0\.0\.0 0\.0\.0\.0[ \t]*$

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

config system admin edit "<admin>" set trusthost1 10.0.0.0 255.255.255.0 next end # CIS guidance: To remove a trusted host item from the list in CLI: config system admin edit "test_admin" unset trusthost1 end To add a trusted host into the list in CLI: config system admin edit "test_admin" set trusthost6 1.1.1.1 255.255.255.255 end Before adding an item, please make sure that it does not already exist. For example, if trusthost3 is already in the list, using it again will override the existing host/network. In the Web GUI: 1. System > Administrators. 2. select the account and click on edit. 3. In the account setting page, make sure that "Restrict login to trusted hosts" is enabled and all the allowed hosts / subnets are in the list of trusted host. Please take note that certain versions of FortiOS will only show the first 3 trusted hosts in the list. If you want to see more, you have to click on the "+" sign as if you're adding a new item into the list. Keep clicking until you see an empty field of trusted host. That's when you know that you have reached the bottom of the list. To add another trusted host, fill in the empty field of the new "Trusted Host". To remove a trusted host, simply erase everything in the field of that corresponding host.

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

tmaegis scan --target fortiswitch