TMA-SOPHOS-1.2.1
Ensure SNMPv3 is selected for queries and traps
Mô tả
SNMP (Simple Network Management Protocol) gives access to Sophos Firewall information such as status of the firewall, service availability, CPU, memory and disk usage. Although Sophos Firewall supports SNMPv1 and SNMPv2c protocols, you should always use SNMPv3 for user and the authorized hosts to send traps. Specify encryption and authentication settings to ensure confidentiality, message integrity, and user validity. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).
Cách kiểm tra
Phương pháp kiểm tra: Xem xét thủ công
Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.
Navigate to 'System > Administration > SNMP'. Verify that SNMPv1 and v2 are not configured. Verify that 'SNMPv3 users and traps > Encryption algorithm' is configured with either AES or DES. Set appropriate password strength for both authentication and encryption.
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
Navigate to 'System > Administration > SNMP'. Remove insecure SNMPv1 and v2 configurations. Set 'SNMPv3 users and traps > Encryption algorithm' is configured with either AES or DES. Set appropriate password strength for both authentication and encryption.
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- sophossnmp
- Tham chiếu
- CIS Sophos Firewall v22 Benchmark v1.0.0 - 1.2.1 Ensure SNMPv3 is selected for queries and traps