Ensure Wireless Protection is configured with secure configuration

OrtaDüzey 1Manuel incelemesophos

Açıklama

When Sophos firewall is used as Wireless controller to manage Sophos Access Points, it is important to tighten configuration to prevent unauthorized access to the Wireless network. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

Navigate to 'Protect > Wireless > Wireless networks' Verify the existing 'Wireless' settings with 'Security mode', either 'WPA2 Personal' or 'WPA2 Enterprise' should be used. Under 'Advanced settings' Verify that 'Encryption' is set to 'AES[secure]' Verify that 'Time-based access' is 'Enable' with 'Select active time' and appropriate schedule to limit the availability. Verify that 'Client isolation' is 'Enabled'.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Navigate to 'Protect > Wireless > Wireless networks' Set the existing 'Wireless' settings with 'Security mode', either 'WPA2 Personal' or 'WPA2 Enterprise'. Under 'Advanced settings' Set 'Encryption' to 'AES[secure]' Set 'Time-based access' to 'Enable' with 'Select active time' and configure appropriate schedule to limit the availability. Set 'Client isolation' to 'Enabled'.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: sophoshardening
Referans: CIS Sophos Firewall v22 Benchmark v1.0.0 - 5.9 Ensure Wireless Protection is configured with secure configuration