Ensure Access to Fusion is restricted via Access Control List (ACL)

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

1. Sign in to the Oracle Cloud Infrastructure Console with the appropriate administrator privileges 2. Navigate to the Fusion SaaS environment's network settings and locate the Access Control List configuration 3. Verify that ACLs are enabled for the environment 4. Confirm that the ACL contains only trusted public IP addresses, CIDR ranges, or OCI Virtual Cloud Networks (VCNs) 5. Check that the allowlist excludes overly broad ranges such as 0.0.0.0/0 6.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

1. In the Oracle Cloud Infrastructure Console, access the Fusion SaaS environment's network configuration 2. Enable the Access Control List feature if not already active 3. Add the organization's trusted public IP addresses, CIDR ranges, and/or OCI Virtual Cloud Networks (VCNs) to the ACL 4. Save the configuration and confirm that the ACL is enforced 5. Remove any broad or unnecessary ranges that could allow access from untrusted sources 6. Document any exceptions that must remain open, including justification and approval 7. Validate the changes by testing access from both allowed and disallowed networks to ensure enforcement is functioning as expected