Kural gezgini
Katalogdaki her sıkılaştırma kuralına göz atın. Platforma, önem derecesine, profil düzeyine ve denetimin otomatikleştirilip otomatikleştirilemeyeceğine göre filtreleyin.
36 kural bulundu/ 16.927Sayfa 1 / 2
| Kimlik | Başlık | Platform | Önem derecesi | Düzey | Denetim |
|---|---|---|---|---|---|
| TMA-FLASHARRAY-1.6 | Ensure brute-force lockout is set to 3 attempts with a lockout duration of at least 1 hourflasharray · Düzey 1 | flasharray | Yüksek | 1 | Otomatik |
| TMA-FLASHARRAY-1.7 | Ensure the password policy enforces 8+ characters, 3+ character groups, and username and dictionary checksflasharray · Düzey 1 | flasharray | Yüksek | 1 | Otomatik |
| TMA-FLASHARRAY-3.1 | Ensure NFS export policies restrict client access and enforce secure authentication (no wildcards, root squash, no sys auth)flasharray · Düzey 1 | flasharray | Yüksek | 1 | Otomatik |
| TMA-FLASHARRAY-3.2 | Ensure SMB client policies require encryption, restrict client access, and disable anonymous accessflasharray · Düzey 1 | flasharray | Yüksek | 1 | Otomatik |
| TMA-FLASHARRAY-4.1 | Ensure manual eradication is disabled and the eradication delay is at least 8 days for production dataflasharray · Düzey 1 | flasharray | Yüksek | 1 | Otomatik |
| TMA-FLASHARRAY-1.1 | Ensure a management SAML SSO configuration is created and enabledflasharray · Düzey 1 | flasharray | Orta | 1 | Manuel inceleme |
| TMA-FLASHARRAY-1.2 | Ensure a management LDAP/Active Directory service is configured and enabled with at least one group mappedflasharray · Düzey 1 | flasharray | Orta | 1 | Manuel inceleme |
| TMA-FLASHARRAY-1.3 | Ensure only authorized local administrative accounts exist and a local emergency-access account is retainedflasharray · Düzey 1 | flasharray | Orta | 1 | Manuel inceleme |
| TMA-FLASHARRAY-1.4 | Ensure administrators and directory groups are granted least- privilege roles via management access policiesflasharray · Düzey 1 | flasharray | Orta | 1 | Manuel inceleme |
| TMA-FLASHARRAY-1.5 | Ensure SSH key-based authentication is configured for CLI access, preferably sourced from LDAPflasharray · Düzey 1 | flasharray | Orta | 1 | Manuel inceleme |
| TMA-FLASHARRAY-1.8 | Ensure OAuth API clients use least-privilege access policies and access-token TTLs of 60 minutes or lessflasharray · Düzey 1 | flasharray | Orta | 1 | Manuel inceleme |
| TMA-FLASHARRAY-1.9 | Ensure static REST API tokens are used only when necessary and configured to expire periodicallyflasharray · Düzey 1 | flasharray | Orta | 1 | Manuel inceleme |
| TMA-FLASHARRAY-1.10 | Ensure administrative audit logs are forwarded to remote syslog or monitored via the REST APIflasharray · Düzey 1 | flasharray | Orta | 1 | Manuel inceleme |
| TMA-FLASHARRAY-1.11 | Ensure administrative session logs are forwarded to remote syslog or monitored via the REST APIflasharray · Düzey 1 | flasharray | Orta | 1 | Manuel inceleme |
| TMA-FLASHARRAY-1.12 | Ensure system alerts are actively monitored via remote syslog or email alert watchersflasharray · Düzey 1 | flasharray | Orta | 1 | Manuel inceleme |
| TMA-FLASHARRAY-1.13 | Ensure at least one alert watcher is configured to receive alerts of all severitiesflasharray · Düzey 1 | flasharray | Orta | 1 | Otomatik |
| TMA-FLASHARRAY-1.14 | Ensure at least one remote management syslog server is configuredflasharray · Düzey 1 | flasharray | Orta | 1 | Otomatik |
| TMA-FLASHARRAY-2.1 | Ensure array TLS certificates are CA-signed, adequately sized, and rotated at least every 90 daysflasharray · Düzey 1 | flasharray | Orta | 1 | Manuel inceleme |
| TMA-FLASHARRAY-2.3 | Ensure Active Directory accounts are configured to require TLSflasharray · Düzey 1 | flasharray | Orta | 1 | Manuel inceleme |
| TMA-FLASHARRAY-2.4 | Ensure LDAP directory services use LDAPS with a configured CA root of trustflasharray · Düzey 1 | flasharray | Orta | 1 | Otomatik |
| TMA-FLASHARRAY-2.5 | Ensure syslog servers use TLS with a configured CA root of trustflasharray · Düzey 1 | flasharray | Orta | 1 | Otomatik |
| TMA-FLASHARRAY-2.6 | Ensure the SMTP relay host is configured with STARTTLS encryption and authenticationflasharray · Düzey 1 | flasharray | Orta | 1 | Otomatik |
| TMA-FLASHARRAY-2.7 | Ensure SNMP, if enabled, uses SNMPv3 with SHA authentication and AES privacyflasharray · Düzey 1 | flasharray | Orta | 1 | Otomatik |
| TMA-FLASHARRAY-2.9 | Ensure product diagnostic tests for environmental integrations are run periodicallyflasharray · Düzey 1 | flasharray | Orta | 1 | Manuel inceleme |
| TMA-FLASHARRAY-3.3 | Ensure native Active Directory integration is used for NFS and SMB identity and authenticationflasharray · Düzey 1 | flasharray | Orta | 1 | Manuel inceleme |