TMAegisBeta
Thêm quy tắc cho power-platform

Microsoft Power Platform

TMA-POWERPLATFORM-2.3

Ensure 'Set blocked file extensions' is configured to match the enterprise block list

Trung bìnhCấp 1Xem xét thủ côngpower-platform

Mô tả

This setting prevents the upload or download of certain attachment types that are considered dangerous. Dynamics 365 comes with a predefined extensions list that is blocked in the tool; it is required to have it as restricted as possible, allowing just the extensions that are required for business purposes. Consider updating the blocked extensions periodically.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

Verify the 'Set blocked file extensions' is configured to match the organizations block list. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings. 3. Expand Product then select Privacy + Security. 4. Review the list extensions to ensure it matches the organizations block list.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

Ensure the 'Set blocked file extensions' is configured to match the organizations block list. In the Power Platform Admin Center: 1. Log in to https://admin.powerplatform.microsoft.com and select the appropriate environment. 2. Select Settings. 3. Expand Product then select Privacy + Security. 4. Add extensions as relevant to the organization.

Thuộc tính

Hệ điều hành
Bất kỳ
Thẻ
power-platformsaas
Tham chiếu
CIS Microsoft Dynamics 365 Power Platform Benchmark v1.0.1 - 2.3 Ensure 'Set blocked file extensions' is configured to match the enterprise block list