Ensure DHCP is disabled

中等級 1自動化checkpoint

說明

Disable the Dynamic Host Configuration Protocol (DHCP) server on your device. FAILs if the Gaia DHCP server (or a DHCP subnet) is enabled. Audited against the Gaia clish 'show configuration' output (run 'show configuration' in clish on each gateway and management server and save the full output).

檢查方式

稽核方法: 設定正規表示式

比對模式: (?m)^set dhcp server (?:enable|subnet \S+ enable)\b

修補方式

修補方法: 操作指南或基礎設施修補檔

set dhcp server disable save config # CIS guidance: Run the following command to disable the DHCP. CLI: set dhcp server disable GUI: Navigate to Network Management > DHCP Server > DHCP Server Configuration > veriify Enable DHCP Server is unchecked

屬性

作業系統: 不限
標籤: checkpointlayer2
參考資料: CIS Check Point Firewall Benchmark v1.1.0 - 2.1.10 Ensure DHCP is disabled

檢查此主機

請在您有權稽核的機器上執行此指令。掃描為唯讀操作。

shell

tmaegis scan --target checkpoint