Sophos Firewall
TMA-SOPHOS-5.1
Ensure Web Policy is configured to block inappropriate URLs, Malware and content scanning is configured correctly.
Mô tả
Configure Web Policy to control users' web browsing activities, block inappropriate web categories and enforce malware scanning for FTP and HTTP(S) traffic. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).
Cách kiểm tra
Phương pháp kiểm tra: Xem xét thủ công
Navigate to 'Protect > Web'. Verify that configured web policies have categories with 'objectionable classification' is set to block. Ensure that Status is set to 'ON' with the block rule is on top. Within the web policy 'Advanced settings > Enable logging and reporting' is checked. Navigate to 'Protect > Web > General settings > Protection > Malware and content scanning'. Verify that 'Action on malware scan failure' is set to 'Block(best protection)'. Verify that 'Block potentially unwanted applications' is checked. Navigate to 'Protect > Web > Exceptions'. (Full steps: CIS 5.1.)
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
Navigate to 'Protect > Web' Set the web policy to block categories with 'objectionable classification' and change the status to 'ON'. Within the web policy set the 'Enable logging and reporting'. Navigate to 'Protect > Web > General settings > Protection > Malware and content scanning' Action on 'malware scan failure' is set to 'Block(best protection)'. Enable 'Block potentially unwanted applications'. Navigate to 'Protect > Web > Exceptions' Remove/edit 'exceptions' with 'URL patterns, website categories and destination IP address (website address)' that could reduce security effectiveness to the 'source IP address (end-users' address)'.
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- sophosthreat-prevention
- Tham chiếu
- CIS Sophos Firewall v22 Benchmark v1.0.0 - 5.1 Ensure Web Policy is configured to block inappropriate URLs, Malware and content scanning is configured correctly.