规则浏览器
浏览目录中的每一条加固规则。可按平台、严重程度、配置级别以及是否支持自动化检查进行筛选。
找到 40 条规则共 11,219 条第 1 / 2 页
| ID | 标题 | 平台 | 严重程度 | 级别 | 检查方式 |
|---|---|---|---|---|---|
| TMA-SOPHOS-1.1.1 | Ensure admin session 'logout' for inactivity and 'block' is configured for failed sign-insophos · 级别 1 | sophos | 高 | 1 | 人工审核 |
| TMA-SOPHOS-1.1.4 | Ensure SSL server certificate for remote SSL VPN is configured correctlysophos · 级别 2 | sophos | 高 | 2 | 人工审核 |
| TMA-SOPHOS-1.1.5 | Ensure password complexity check is enabledsophos · 级别 1 | sophos | 高 | 1 | 人工审核 |
| TMA-SOPHOS-1.1.6 | Ensure management access to the device is restricted from selected IP addresses and disable from WAN Zonesophos · 级别 1 | sophos | 高 | 1 | 人工审核 |
| TMA-SOPHOS-1.1.8 | Ensure MFA for Web console access and remote access VPNsophos · 级别 1 | sophos | 高 | 1 | 人工审核 |
| TMA-SOPHOS-1.1.9 | Ensure MFA for default adminsophos · 级别 1 | sophos | 高 | 1 | 人工审核 |
| TMA-SOPHOS-1.2.1 | Ensure SNMPv3 is selected for queries and trapssophos · 级别 1 | sophos | 高 | 1 | 人工审核 |
| TMA-SOPHOS-2.2 | Ensure Encrypted connection is used in connecting external Active Directory and LDAPsophos · 级别 1 | sophos | 高 | 1 | 人工审核 |
| TMA-SOPHOS-3.2 | Ensure 'Pattern updates' is set to download and install updates every 15 minutessophos · 级别 1 | sophos | 高 | 1 | 人工审核 |
| TMA-SOPHOS-3.4 | Ensure Sophos Firewall takes encrypted backup of the configuration and send to designated email address with scheduled frequencysophos · 级别 1 | sophos | 高 | 1 | 人工审核 |
| TMA-SOPHOS-3.6 | Ensure Site-to-Site IPSec VPN is not configured with "Aggressive Mode"sophos · 级别 2 | sophos | 高 | 2 | 人工审核 |
| TMA-SOPHOS-4.1 | Ensure 'Sophos X-Ops threat feeds (Advanced threat protection)' is set to ‘Enabled' and Policy is set to ‘Log and drop'sophos · 级别 2 | sophos | 高 | 2 | 人工审核 |
| TMA-SOPHOS-4.2 | Ensure Zero-day protection is enabled at the firewall rule for web protection and does not exclude any file type from zero-day protection analysissophos · 级别 2 | sophos | 高 | 2 | 人工审核 |
| TMA-SOPHOS-4.3 | Ensure Zero-day protection is enabled for Email Protection and set to MTA modesophos · 级别 2 | sophos | 高 | 2 | 人工审核 |
| TMA-SOPHOS-4.5 | Ensure MDR Threat Feeds is enabledsophos · 级别 2 | sophos | 高 | 2 | 人工审核 |
| TMA-SOPHOS-4.6 | Ensure Third-party Threat Feeds is enabledsophos · 级别 2 | sophos | 高 | 2 | 人工审核 |
| TMA-SOPHOS-5.2 | Ensure SSL/TLS inspection rules is enabled to all relevant firewall policiessophos · 级别 2 | sophos | 高 | 2 | 人工审核 |
| TMA-SOPHOS-5.4 | Ensure Intrusion Prevention(IPS) policy is configured on active firewall rulessophos · 级别 2 | sophos | 高 | 2 | 人工审核 |
| TMA-SOPHOS-5.8 | Ensure Firewall Rules with SMB, Netbios, RDP and other unencrypted protocols should not be directly accessible from WAN Zonesophos · 级别 1 | sophos | 高 | 1 | 人工审核 |
| TMA-SOPHOS-5.10 | Ensure No Firewall Rules with source 'ANY', service 'ANY' and destination 'ANY' from 'WAN' Zonesophos · 级别 1 | sophos | 高 | 1 | 人工审核 |
| TMA-SOPHOS-1.1.3 | Ensure NTP servers are configured appropriatelysophos · 级别 1 | sophos | 中 | 1 | 人工审核 |
| TMA-SOPHOS-1.1.7 | Ensure valid certificate is set for web browser used to access Webadmin interfacesophos · 级别 2 | sophos | 中 | 2 | 人工审核 |
| TMA-SOPHOS-1.2.2 | Ensure notification is configured to send system and security eventssophos · 级别 1 | sophos | 中 | 1 | 人工审核 |
| TMA-SOPHOS-2.1 | Ensure Firewall rules are configured to identify users before authorizing accesssophos · 级别 2 | sophos | 中 | 2 | 人工审核 |
| TMA-SOPHOS-3.1 | Ensure "Fully Synchronized" High Availability peer is configuredsophos · 级别 2 | sophos | 中 | 2 | 人工审核 |