Ensure Zero-day protection is enabled at the firewall rule for web protection and does not exclude any file type from zero-day protection analysis

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

For firewall rules that allowed outbound traffic to the internet should be enabled with ‘Use zero-day protection'. Navigate to 'Protect > Rules and policies > Firewall rules' existing firewall rule with allowed outbound traffic and verify 'Security features > Web filtering > Malware and content scanning > Scan HTTP and decrypted HTTPS', 'Use zero-day protection' and 'Scan FTP for malware' is checked. Navigate to 'Monitor & Analyze > Zero-day protection > Protection Settings' and verify 'Exclude file types' to ensure there are no file type is exempted from Sandbox analysis.

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

Navigate to 'Protect > Rules and policies > Firewall rules' existing firewall rule with allowed outbound traffic and configure 'Security features > Web filtering > Malware and content scanning > Scan HTTP and decrypted HTTPS', 'Use Zero-day protection' and 'Scan FTP for malware' is checked. Navigate to 'Monitor & Analyze > Zero-day protection > Protection Settings' and remove file type exceptions from 'Exclude file types'.