Ensure Encrypted connection is used in connecting external Active Directory and LDAP

高等級 1人工審核sophos

說明

Microsoft has made secure connections mandatory for recent server versions. The security of the communication can be significantly improved for LDAP simple binds that are performed over SSL/TLS connections. Reviewed in the Sophos Firewall web admin console (SFOS has no plain-text configuration export to audit offline).

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

Navigate to 'Configure > Authentication > Servers > Edit' and verify that 'Connection security' is selected with either 'SSL/TLS' or 'STARTTLS' is used and 'Validate server certificate' is checked.

修補方式

修補方法: 操作指南或基礎設施修補檔

Navigate to 'Configure > Authentication > Servers > Edit or Add' and set 'Connection security' with either 'SSL/TLS' or 'STARTTLS' and 'Validate server certificate' is checked.

屬性

作業系統: 不限
標籤: sophosauthentication
參考資料: CIS Sophos Firewall v22 Benchmark v1.0.0 - 2.2 Ensure Encrypted connection is used in connecting external Active Directory and LDAP