Ensure Web Policy is configured to block inappropriate URLs, Malware and content scanning is configured correctly.

OrtaDüzey 2Manuel incelemesophos

Açıklama

Configure Web Policy to control users' web browsing activities, block inappropriate web categories and enforce malware scanning for FTP and HTTP(S) traffic. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Navigate to 'Protect > Web'. Verify that configured web policies have categories with 'objectionable classification' is set to block. Ensure that Status is set to 'ON' with the block rule is on top. Within the web policy 'Advanced settings > Enable logging and reporting' is checked. Navigate to 'Protect > Web > General settings > Protection > Malware and content scanning'. Verify that 'Action on malware scan failure' is set to 'Block(best protection)'. Verify that 'Block potentially unwanted applications' is checked. Navigate to 'Protect > Web > Exceptions'. (Full steps: CIS 5.1.)

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Navigate to 'Protect > Web' Set the web policy to block categories with 'objectionable classification' and change the status to 'ON'. Within the web policy set the 'Enable logging and reporting'. Navigate to 'Protect > Web > General settings > Protection > Malware and content scanning' Action on 'malware scan failure' is set to 'Block(best protection)'. Enable 'Block potentially unwanted applications'. Navigate to 'Protect > Web > Exceptions' Remove/edit 'exceptions' with 'URL patterns, website categories and destination IP address (website address)' that could reduce security effectiveness to the 'source IP address (end-users' address)'.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: sophosthreat-prevention
Referans: CIS Sophos Firewall v22 Benchmark v1.0.0 - 5.1 Ensure Web Policy is configured to block inappropriate URLs, Malware and content scanning is configured correctly.