TMAegis
power-platform için daha fazla kural

Microsoft Power Platform

TMA-POWERPLATFORM-2.3

Ensure 'Set blocked file extensions' is configured to match the enterprise block list

OrtaDüzey 1Manuel incelemepower-platform

Açıklama

This setting prevents the upload or download of certain attachment types that are considered dangerous. Dynamics 365 comes with a predefined extensions list that is blocked in the tool; it is required to have it as restricted as possible, allowing just the extensions that are required for business purposes. Consider updating the blocked extensions periodically.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Verify the 'Set blocked file extensions' is configured to match the organizations block list. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings. 3. Expand Product then select Privacy + Security. 4. Review the list extensions to ensure it matches the organizations block list.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Ensure the 'Set blocked file extensions' is configured to match the organizations block list. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings. 3. Expand Product then select Privacy + Security. 4. Add extensions as relevant to the organization.

Özellikler

İşletim sistemleri
Herhangi biri
Etiketler
power-platformsaas
Referans
CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 2.3 Ensure 'Set blocked file extensions' is configured to match the enterprise block list