TMA-SOPHOS-4.5
Ensure MDR Threat Feeds is enabled
Mô tả
MDR Threat Feeds is Sophos Managed Detection and Response (MDR) service that is integrated with the firewall. Sophos MDR analysts can push threat intelligence to the firewall directly from Sophos Central, allowing the firewall to coordinate defenses immediately. The feed is based on your network's traffic related to malicious servers. The firewall automatically blocks traffic based on the IPv4 addresses, domains, and URLs in the MDR threat feeds. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).
Cách kiểm tra
Phương pháp kiểm tra: Xem xét thủ công
Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.
Navigate to Protect > Active threat response > MDR threat feeds Enable 'MDR threat feeds' Select the Action 'Log Only' or 'Log and drop' Log only: Only logs the threats. Log and drop: Logs and blocks threats.
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
Navigate to Protect > Active threat response > MDR threat feeds Enable 'MDR threat feeds' Select the Action 'Log Only' or 'Log and drop' Log only: Only logs the threats. Log and drop: Logs and blocks threats.
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- sophosthreat-prevention
- Tham chiếu
- CIS Sophos Firewall v22 Benchmark v1.0.0 - 4.5 Ensure MDR Threat Feeds is enabled