Ensure FTP Logon attempt restrictions is enabled

OrtaDüzey 1Otomatikiis

Açıklama

FTP Logon attempt restrictions is a built-in network security feature to automatically block brute force FTP attacks. This can be used to mitigate a malicious client from attempting a brute-force attack on a discovered account, such as the local administrator account. FTP logon attempt restrictions (system.ftpServer/security/authentication/denyByFailure enabled) must be on. Not applicable when the FTP service is not installed. PowerShell 5.1 with the WebAdministration module; run elevated. CIS marks this recommendation Manual; the automated check implements its audit procedure.

Nasıl denetlenir

Denetim yöntemi: Kabuk komutu

shell

Import-Module WebAdministration -ErrorAction Stop; $c = Get-WebConfiguration -Filter 'system.ftpServer/security/authentication/denyByFailure' -PSPath 'MACHINE/WEBROOT/APPHOST'; if ($c.enabled -eq $true) { 'compliant' } else { 'noncompliant' }

Beklenen çıktı: compliant

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Set-WebConfigurationProperty -PSPath 'MACHINE/WEBROOT/APPHOST' -Filter system.ftpServer/security/authentication/denyByFailure -Name enabled -Value True (set maxFailure and entryExpiration as required)

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: iisftp
Referans: CIS Microsoft IIS 10 Benchmark v1.2.1 - 6.2 Ensure FTP Logon attempt restrictions is enabled

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target iis