Rule explorer
Browse every hardening rule in the catalogue. Filter by platform, severity, profile level and whether the check can be automated.
40 rules foundof 8,597Page 1 of 2
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-SOPHOS-1.1.1 | Ensure admin session 'logout' for inactivity and 'block' is configured for failed sign-insophos · Level 1 | sophos | High | 1 | Manual review |
| TMA-SOPHOS-1.1.4 | Ensure SSL server certificate for remote SSL VPN is configured correctlysophos · Level 2 | sophos | High | 2 | Manual review |
| TMA-SOPHOS-1.1.5 | Ensure password complexity check is enabledsophos · Level 1 | sophos | High | 1 | Manual review |
| TMA-SOPHOS-1.1.6 | Ensure management access to the device is restricted from selected IP addresses and disable from WAN Zonesophos · Level 1 | sophos | High | 1 | Manual review |
| TMA-SOPHOS-1.1.8 | Ensure MFA for Web console access and remote access VPNsophos · Level 1 | sophos | High | 1 | Manual review |
| TMA-SOPHOS-1.1.9 | Ensure MFA for default adminsophos · Level 1 | sophos | High | 1 | Manual review |
| TMA-SOPHOS-1.2.1 | Ensure SNMPv3 is selected for queries and trapssophos · Level 1 | sophos | High | 1 | Manual review |
| TMA-SOPHOS-2.2 | Ensure Encrypted connection is used in connecting external Active Directory and LDAPsophos · Level 1 | sophos | High | 1 | Manual review |
| TMA-SOPHOS-3.2 | Ensure 'Pattern updates' is set to download and install updates every 15 minutessophos · Level 1 | sophos | High | 1 | Manual review |
| TMA-SOPHOS-3.4 | Ensure Sophos Firewall takes encrypted backup of the configuration and send to designated email address with scheduled frequencysophos · Level 1 | sophos | High | 1 | Manual review |
| TMA-SOPHOS-3.6 | Ensure Site-to-Site IPSec VPN is not configured with "Aggressive Mode"sophos · Level 2 | sophos | High | 2 | Manual review |
| TMA-SOPHOS-4.1 | Ensure 'Sophos X-Ops threat feeds (Advanced threat protection)' is set to ‘Enabled' and Policy is set to ‘Log and drop'sophos · Level 2 | sophos | High | 2 | Manual review |
| TMA-SOPHOS-4.2 | Ensure Zero-day protection is enabled at the firewall rule for web protection and does not exclude any file type from zero-day protection analysissophos · Level 2 | sophos | High | 2 | Manual review |
| TMA-SOPHOS-4.3 | Ensure Zero-day protection is enabled for Email Protection and set to MTA modesophos · Level 2 | sophos | High | 2 | Manual review |
| TMA-SOPHOS-4.5 | Ensure MDR Threat Feeds is enabledsophos · Level 2 | sophos | High | 2 | Manual review |
| TMA-SOPHOS-4.6 | Ensure Third-party Threat Feeds is enabledsophos · Level 2 | sophos | High | 2 | Manual review |
| TMA-SOPHOS-5.2 | Ensure SSL/TLS inspection rules is enabled to all relevant firewall policiessophos · Level 2 | sophos | High | 2 | Manual review |
| TMA-SOPHOS-5.4 | Ensure Intrusion Prevention(IPS) policy is configured on active firewall rulessophos · Level 2 | sophos | High | 2 | Manual review |
| TMA-SOPHOS-5.8 | Ensure Firewall Rules with SMB, Netbios, RDP and other unencrypted protocols should not be directly accessible from WAN Zonesophos · Level 1 | sophos | High | 1 | Manual review |
| TMA-SOPHOS-5.10 | Ensure No Firewall Rules with source 'ANY', service 'ANY' and destination 'ANY' from 'WAN' Zonesophos · Level 1 | sophos | High | 1 | Manual review |
| TMA-SOPHOS-1.1.3 | Ensure NTP servers are configured appropriatelysophos · Level 1 | sophos | Medium | 1 | Manual review |
| TMA-SOPHOS-1.1.7 | Ensure valid certificate is set for web browser used to access Webadmin interfacesophos · Level 2 | sophos | Medium | 2 | Manual review |
| TMA-SOPHOS-1.2.2 | Ensure notification is configured to send system and security eventssophos · Level 1 | sophos | Medium | 1 | Manual review |
| TMA-SOPHOS-2.1 | Ensure Firewall rules are configured to identify users before authorizing accesssophos · Level 2 | sophos | Medium | 2 | Manual review |
| TMA-SOPHOS-3.1 | Ensure "Fully Synchronized" High Availability peer is configuredsophos · Level 2 | sophos | Medium | 2 | Manual review |