Ensure 'Sophos X-Ops threat feeds (Advanced threat protection)' is set to ‘Enabled' and Policy is set to ‘Log and drop'

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时，扫描结果会列出该项并附带这些说明。

Navigate to 'Protect > Advanced threat response > Sophos X-Ops threat feeds (Advanced threat protection) > Sophos X-Ops threat feeds'. Verify that 'Sophos X-Ops threat feeds' is 'Enabled' Verify that action is set to 'Log and drop'. Verify that wide range of network/host IP addresses are not added to 'Host and network Exceptions'. Verify that wide range of domains, URLs or IP addresses are not added to 'Threat Exceptions' that may expose network to the security risks.

修复方式

修复方法: 操作指南或基础设施补丁

Navigate to 'Advanced threat response > Sophos X-Ops threat feeds (Advanced threat protection) > Sophos X-Ops threat feeds'. Enable Sophos X-Ops threat feeds Set the action to 'Log and drop'. Remove unnecessary exemption from network and threat exceptions.