Ensure Location-Based Access Control (LBAC) is enabled

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

1. Confirm that the IT Security Manager role is assigned 2. In a test or non-production environment, validate LBAC configuration before enabling in production 3. Navigate to Navigator, Tools, Security Console, Location Based Access 4. Verify that Enable Location Based Access is selected 5. Review the IP Address Allowlist to ensure it contains valid IPv4 or CIDR ranges for trusted networks 6. Confirm that the IT Security Manager role is designated as public to preserve administrative access 7.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

1. Use an account with the IT Security Manager role to configure LBAC 2. In the Security Console, open the Location Based Access tab and select Enable Location Based Access 3. Add trusted IP addresses or CIDR ranges, including the administrator's current IP to avoid lockout 4. Save the configuration and confirm the change 5. Mark the IT Security Manager role as public to preserve console access even from unregistered networks 6. If disabling LBAC, deselect the option; allowlist entries remain stored for reuse 7. Validate by testing login from both trusted and untrusted IPs