Oracle Fusion Cloud (SaaS)
TMA-ORACLE-SAAS-2.3
Ensure Access to Fusion is restricted via Access Control List (ACL)
说明
An Access Control List (ACL) restricts connections to Oracle Fusion SaaS environments by allowing access only from defined public IP addresses, CIDR ranges, or Oracle Cloud Infrastructure (OCI) Virtual Cloud Networks (VCNs). Enabling ACLs enforces strict network perimeter controls around Oracle Fusion environments. By limiting access to trusted IPs or VCNs, ACLs protect against unauthorized access attempts from the public internet and ... Reported as a manual review item: these Fusion/EPM/OCI IAM settings are reviewed in the Oracle SaaS and OCI consoles or reports.
检查方式
审计方法: 人工审核
1. Sign in to the Oracle Cloud Infrastructure Console with the appropriate administrator privileges 2. Navigate to the Fusion SaaS environment's network settings and locate the Access Control List configuration 3. Verify that ACLs are enabled for the environment 4. Confirm that the ACL contains only trusted public IP addresses, CIDR ranges, or OCI Virtual Cloud Networks (VCNs) 5. Check that the allowlist excludes overly broad ranges such as 0.0.0.0/0 6.
修复方式
修复方法: 操作指南或基础设施补丁
1. In the Oracle Cloud Infrastructure Console, access the Fusion SaaS environment's network configuration 2. Enable the Access Control List feature if not already active 3. Add the organization's trusted public IP addresses, CIDR ranges, and/or OCI Virtual Cloud Networks (VCNs) to the ACL 4. Save the configuration and confirm that the ACL is enforced 5. Remove any broad or unnecessary ranges that could allow access from untrusted sources 6. Document any exceptions that must remain open, including justification and approval 7. Validate the changes by testing access from both allowed and disallowed networks to ensure enforcement is functioning as expected
属性
- 操作系统
- 任意
- 标签
- oracle-saasnetwork
- 参考
- CIS Oracle SaaS Cloud Applications Benchmark v1.0.0 - 2.3 Ensure Access to Fusion is restricted via Access Control List (ACL)