Ensure notification is configured to send system and security events

OrtaDüzey 1Manuel incelemesophos

Açıklama

This recommendation ensures that administrator receives notification on system events, reports and security incidents either via email or SNMP Traps. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Navigate to 'System > Administration > Notification settings > Mail server settings'. Verify that 'Send notification via > Built-in email server' or 'External email server' is checked and configure email settings appropriately. Navigate to 'Configure > System services > Notification list'. Verify that appropriate admin, system and security events are checked to send email notification and/or SNMP traps.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Navigate to 'System > Administration > Notification settings'. When 'built-in email server' is used. Set the 'from email address' of the sender. Set the 'Send notifications to email address' of the administrators' email address. Set 'Management interface IP address' to send notification from. When 'External mail server' is used. Set the 'Mail server IPv4 address/FQDN – Port' is set to the outgoing mail server. Set 'username' and 'password' to authenticate to the outgoing mail server. Set 'connection security' to 'STARTTLS' or 'SSL/TLS'. Navigate to 'Configure > System services > Notification list'. Set the appropriate admin, system and security events to send email notification and/or SNMP traps.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: sophoslogging
Referans: CIS Sophos Firewall v22 Benchmark v1.0.0 - 1.2.2 Ensure notification is configured to send system and security events