TMA-FORTIGATE-4.2.5

Enable grayware detection on antivirus

高级别 2自动化fortigate

说明

Grayware detection should be enabled. PASS requires grayware enable. Audited against FortiOS 'show full-configuration' output (run it from the global context on VDOM-enabled units and save the full output); patterns are scoped to the named 'config ... end' block, whose member lines are indented.

检查方式

审计方法: 配置正则匹配

匹配模式: (?m)^config antivirus settings\n(?:[ \t]+[^\n]*\n)*?[ \t]+set grayware enable[ \t]*$

修复方式

修复方法: 操作指南或基础设施补丁

config antivirus settings set grayware enable end # CIS guidance: On CLI: config antivirus settings set grayware enable

属性

操作系统: 任意
标签: fortigatethreat-prevention
参考: CIS FortiGate 7.4.x Benchmark v1.0.1 - 4.2.5 Enable grayware detection on antivirus

检查本机

请在您有权审计的机器上运行此命令。扫描为只读操作。

shell

tmaegis scan --target fortigate --level 2