Kural gezgini
Katalogdaki her sıkılaştırma kuralına göz atın. Platforma, önem derecesine, profil düzeyine ve denetimin otomatikleştirilip otomatikleştirilemeyeceğine göre filtreleyin.
42 kural bulundu/ 16.927Sayfa 1 / 2
| Kimlik | Başlık | Platform | Önem derecesi | Düzey | Denetim |
|---|---|---|---|---|---|
| TMA-SHAREPOINT-1.2 | Ensure that the SharePoint Central Administration Site is TLS- enabledsharepoint · Düzey 1 | sharepoint | Yüksek | 1 | Manuel inceleme |
| TMA-SHAREPOINT-2.2 | Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges for the local server.sharepoint · Düzey 1 | sharepoint | Yüksek | 1 | Otomatik |
| TMA-SHAREPOINT-2.3 | Ensure the SharePoint setup account is configured with the minimum privileges in Active Directory.sharepoint · Düzey 1 | sharepoint | Yüksek | 1 | Manuel inceleme |
| TMA-SHAREPOINT-2.4 | Ensure the SharePoint setup account is configured with the minimum privileges on the SQL server.sharepoint · Düzey 1 | sharepoint | Yüksek | 1 | Manuel inceleme |
| TMA-SHAREPOINT-2.5 | Ensure the SharePoint farm service account (database access account) is configured with the minimum privileges on the SQL server.sharepoint · Düzey 1 | sharepoint | Yüksek | 1 | Manuel inceleme |
| TMA-SHAREPOINT-2.7 | Ensure the SharePoint Central Administration site is not accessible from Extranet or Internet connectionssharepoint · Düzey 1 | sharepoint | Yüksek | 1 | Manuel inceleme |
| TMA-SHAREPOINT-3.5 | Ensure that SharePoint specific malware (i.e. anti-virus) protection software is integrated and configuredsharepoint · Düzey 1 | sharepoint | Yüksek | 1 | Otomatik |
| TMA-SHAREPOINT-3.11 | Ensure that the SharePoint Central Administration interface is not hosted in the DMZ.sharepoint · Düzey 1 | sharepoint | Yüksek | 1 | Manuel inceleme |
| TMA-SHAREPOINT-4.4 | Ensure Anonymous authentication is deniedsharepoint · Düzey 1 | sharepoint | Yüksek | 1 | Manuel inceleme |
| TMA-SHAREPOINT-7.3 | Ensure compilation or scripting of database pages via the PageParserPaths elements is not allowedsharepoint · Düzey 1 | sharepoint | Yüksek | 1 | Otomatik |
| TMA-SHAREPOINT-FARM-ADMINS | Ensure Farm Administrators group membership is restrictedsharepoint · Düzey 1 | sharepoint | Yüksek | 1 | Manuel inceleme |
| TMA-SHAREPOINT-HTTPS-ONLY | Ensure all web applications use HTTPSsharepoint · Düzey 1 | sharepoint | Yüksek | 1 | Otomatik |
| TMA-SHAREPOINT-SERVICE-ACCOUNTS | Ensure web application pools do not run as the farm accountsharepoint · Düzey 1 | sharepoint | Yüksek | 1 | Otomatik |
| TMA-SHAREPOINT-1.1 | Ensure access to SharePointEmailws.asmx is limited to only the server farm accountsharepoint · Düzey 1 | sharepoint | Orta | 1 | Manuel inceleme |
| TMA-SHAREPOINT-1.3 | Ensure specific whitelisted IP addresses, IP address ranges, and/or domains are setsharepoint · Düzey 1 | sharepoint | Orta | 1 | Manuel inceleme |
| TMA-SHAREPOINT-1.4 | Ensure that the underlying Internet Information Services (IIS) Authentication module is set to use Kerberos as its Authentication Providersharepoint · Düzey 1 | sharepoint | Orta | 1 | Manuel inceleme |
| TMA-SHAREPOINT-2.1 | Ensure 'Blocked File Types' is configured to match the enterprise blacklistsharepoint · Düzey 1 | sharepoint | Orta | 1 | Manuel inceleme |
| TMA-SHAREPOINT-2.8 | Ensure Dbcreator and Securityadmin roles are only used as neededsharepoint · Düzey 1 | sharepoint | Orta | 1 | Manuel inceleme |
| TMA-SHAREPOINT-3.2 | Ensure SharePoint implements an information system isolation boundary that minimizes the number of non-security functions included within the boundary containing security functions.sharepoint · Düzey 1 | sharepoint | Orta | 1 | Manuel inceleme |
| TMA-SHAREPOINT-3.3 | Ensure SharePoint implements security functions as a layered structure minimizing interactions between layers of the design and avoiding any dependence by lower layers on the functionality or correctness of higher layers.sharepoint · Düzey 1 | sharepoint | Orta | 1 | Manuel inceleme |
| TMA-SHAREPOINT-3.4 | Ensure SharePoint identifies data type, specification, and usage when transferring information between different security domains so policy restrictions may be applied.sharepoint · Düzey 1 | sharepoint | Orta | 1 | Manuel inceleme |
| TMA-SHAREPOINT-3.6 | Ensure that SharePoint is configured with "Strict" browser file handling settingssharepoint · Düzey 1 | sharepoint | Orta | 1 | Otomatik |
| TMA-SHAREPOINT-3.9 | Ensure that SharePoint application servers are protected by a reverse proxysharepoint · Düzey 1 | sharepoint | Orta | 1 | Manuel inceleme |
| TMA-SHAREPOINT-3.10 | Ensure SharePoint database servers are segregated from application server and placed in a secure zone.sharepoint · Düzey 1 | sharepoint | Orta | 1 | Manuel inceleme |
| TMA-SHAREPOINT-4.2 | Ensure claims-based authentication is used for all web applications and zones of a SharePoint 2019 farmsharepoint · Düzey 1 | sharepoint | Orta | 1 | Otomatik |