Explorateur de règles
Parcourez toutes les règles de durcissement du catalogue. Filtrez par plateforme, gravité, niveau de profil et selon que la vérification peut être automatisée.
36 règles trouvéessur 11 219Page 1 sur 2
| ID | Titre | Plateforme | Gravité | Niveau | Vérification |
|---|---|---|---|---|---|
| TMA-FLASHARRAY-1.6 | Ensure brute-force lockout is set to 3 attempts with a lockout duration of at least 1 hourflasharray · Niveau 1 | flasharray | Élevée | 1 | Automatisée |
| TMA-FLASHARRAY-1.7 | Ensure the password policy enforces 8+ characters, 3+ character groups, and username and dictionary checksflasharray · Niveau 1 | flasharray | Élevée | 1 | Automatisée |
| TMA-FLASHARRAY-3.1 | Ensure NFS export policies restrict client access and enforce secure authentication (no wildcards, root squash, no sys auth)flasharray · Niveau 1 | flasharray | Élevée | 1 | Automatisée |
| TMA-FLASHARRAY-3.2 | Ensure SMB client policies require encryption, restrict client access, and disable anonymous accessflasharray · Niveau 1 | flasharray | Élevée | 1 | Automatisée |
| TMA-FLASHARRAY-4.1 | Ensure manual eradication is disabled and the eradication delay is at least 8 days for production dataflasharray · Niveau 1 | flasharray | Élevée | 1 | Automatisée |
| TMA-FLASHARRAY-1.1 | Ensure a management SAML SSO configuration is created and enabledflasharray · Niveau 1 | flasharray | Moyenne | 1 | Revue manuelle |
| TMA-FLASHARRAY-1.2 | Ensure a management LDAP/Active Directory service is configured and enabled with at least one group mappedflasharray · Niveau 1 | flasharray | Moyenne | 1 | Revue manuelle |
| TMA-FLASHARRAY-1.3 | Ensure only authorized local administrative accounts exist and a local emergency-access account is retainedflasharray · Niveau 1 | flasharray | Moyenne | 1 | Revue manuelle |
| TMA-FLASHARRAY-1.4 | Ensure administrators and directory groups are granted least- privilege roles via management access policiesflasharray · Niveau 1 | flasharray | Moyenne | 1 | Revue manuelle |
| TMA-FLASHARRAY-1.5 | Ensure SSH key-based authentication is configured for CLI access, preferably sourced from LDAPflasharray · Niveau 1 | flasharray | Moyenne | 1 | Revue manuelle |
| TMA-FLASHARRAY-1.8 | Ensure OAuth API clients use least-privilege access policies and access-token TTLs of 60 minutes or lessflasharray · Niveau 1 | flasharray | Moyenne | 1 | Revue manuelle |
| TMA-FLASHARRAY-1.9 | Ensure static REST API tokens are used only when necessary and configured to expire periodicallyflasharray · Niveau 1 | flasharray | Moyenne | 1 | Revue manuelle |
| TMA-FLASHARRAY-1.10 | Ensure administrative audit logs are forwarded to remote syslog or monitored via the REST APIflasharray · Niveau 1 | flasharray | Moyenne | 1 | Revue manuelle |
| TMA-FLASHARRAY-1.11 | Ensure administrative session logs are forwarded to remote syslog or monitored via the REST APIflasharray · Niveau 1 | flasharray | Moyenne | 1 | Revue manuelle |
| TMA-FLASHARRAY-1.12 | Ensure system alerts are actively monitored via remote syslog or email alert watchersflasharray · Niveau 1 | flasharray | Moyenne | 1 | Revue manuelle |
| TMA-FLASHARRAY-1.13 | Ensure at least one alert watcher is configured to receive alerts of all severitiesflasharray · Niveau 1 | flasharray | Moyenne | 1 | Automatisée |
| TMA-FLASHARRAY-1.14 | Ensure at least one remote management syslog server is configuredflasharray · Niveau 1 | flasharray | Moyenne | 1 | Automatisée |
| TMA-FLASHARRAY-2.1 | Ensure array TLS certificates are CA-signed, adequately sized, and rotated at least every 90 daysflasharray · Niveau 1 | flasharray | Moyenne | 1 | Revue manuelle |
| TMA-FLASHARRAY-2.3 | Ensure Active Directory accounts are configured to require TLSflasharray · Niveau 1 | flasharray | Moyenne | 1 | Revue manuelle |
| TMA-FLASHARRAY-2.4 | Ensure LDAP directory services use LDAPS with a configured CA root of trustflasharray · Niveau 1 | flasharray | Moyenne | 1 | Automatisée |
| TMA-FLASHARRAY-2.5 | Ensure syslog servers use TLS with a configured CA root of trustflasharray · Niveau 1 | flasharray | Moyenne | 1 | Automatisée |
| TMA-FLASHARRAY-2.6 | Ensure the SMTP relay host is configured with STARTTLS encryption and authenticationflasharray · Niveau 1 | flasharray | Moyenne | 1 | Automatisée |
| TMA-FLASHARRAY-2.7 | Ensure SNMP, if enabled, uses SNMPv3 with SHA authentication and AES privacyflasharray · Niveau 1 | flasharray | Moyenne | 1 | Automatisée |
| TMA-FLASHARRAY-2.9 | Ensure product diagnostic tests for environmental integrations are run periodicallyflasharray · Niveau 1 | flasharray | Moyenne | 1 | Revue manuelle |
| TMA-FLASHARRAY-3.3 | Ensure native Active Directory integration is used for NFS and SMB identity and authenticationflasharray · Niveau 1 | flasharray | Moyenne | 1 | Revue manuelle |