Explorador de regras
Navegue por todas as regras de hardening do catálogo. Filtre por plataforma, severidade, nível do perfil e se a verificação pode ser automatizada.
36 regras encontradasde 11.219Página 1 de 2
| ID | Título | Plataforma | Severidade | Nível | Verificação |
|---|---|---|---|---|---|
| TMA-FLASHARRAY-1.6 | Ensure brute-force lockout is set to 3 attempts with a lockout duration of at least 1 hourflasharray · Nível 1 | flasharray | Alta | 1 | Automatizada |
| TMA-FLASHARRAY-1.7 | Ensure the password policy enforces 8+ characters, 3+ character groups, and username and dictionary checksflasharray · Nível 1 | flasharray | Alta | 1 | Automatizada |
| TMA-FLASHARRAY-3.1 | Ensure NFS export policies restrict client access and enforce secure authentication (no wildcards, root squash, no sys auth)flasharray · Nível 1 | flasharray | Alta | 1 | Automatizada |
| TMA-FLASHARRAY-3.2 | Ensure SMB client policies require encryption, restrict client access, and disable anonymous accessflasharray · Nível 1 | flasharray | Alta | 1 | Automatizada |
| TMA-FLASHARRAY-4.1 | Ensure manual eradication is disabled and the eradication delay is at least 8 days for production dataflasharray · Nível 1 | flasharray | Alta | 1 | Automatizada |
| TMA-FLASHARRAY-1.1 | Ensure a management SAML SSO configuration is created and enabledflasharray · Nível 1 | flasharray | Média | 1 | Revisão manual |
| TMA-FLASHARRAY-1.2 | Ensure a management LDAP/Active Directory service is configured and enabled with at least one group mappedflasharray · Nível 1 | flasharray | Média | 1 | Revisão manual |
| TMA-FLASHARRAY-1.3 | Ensure only authorized local administrative accounts exist and a local emergency-access account is retainedflasharray · Nível 1 | flasharray | Média | 1 | Revisão manual |
| TMA-FLASHARRAY-1.4 | Ensure administrators and directory groups are granted least- privilege roles via management access policiesflasharray · Nível 1 | flasharray | Média | 1 | Revisão manual |
| TMA-FLASHARRAY-1.5 | Ensure SSH key-based authentication is configured for CLI access, preferably sourced from LDAPflasharray · Nível 1 | flasharray | Média | 1 | Revisão manual |
| TMA-FLASHARRAY-1.8 | Ensure OAuth API clients use least-privilege access policies and access-token TTLs of 60 minutes or lessflasharray · Nível 1 | flasharray | Média | 1 | Revisão manual |
| TMA-FLASHARRAY-1.9 | Ensure static REST API tokens are used only when necessary and configured to expire periodicallyflasharray · Nível 1 | flasharray | Média | 1 | Revisão manual |
| TMA-FLASHARRAY-1.10 | Ensure administrative audit logs are forwarded to remote syslog or monitored via the REST APIflasharray · Nível 1 | flasharray | Média | 1 | Revisão manual |
| TMA-FLASHARRAY-1.11 | Ensure administrative session logs are forwarded to remote syslog or monitored via the REST APIflasharray · Nível 1 | flasharray | Média | 1 | Revisão manual |
| TMA-FLASHARRAY-1.12 | Ensure system alerts are actively monitored via remote syslog or email alert watchersflasharray · Nível 1 | flasharray | Média | 1 | Revisão manual |
| TMA-FLASHARRAY-1.13 | Ensure at least one alert watcher is configured to receive alerts of all severitiesflasharray · Nível 1 | flasharray | Média | 1 | Automatizada |
| TMA-FLASHARRAY-1.14 | Ensure at least one remote management syslog server is configuredflasharray · Nível 1 | flasharray | Média | 1 | Automatizada |
| TMA-FLASHARRAY-2.1 | Ensure array TLS certificates are CA-signed, adequately sized, and rotated at least every 90 daysflasharray · Nível 1 | flasharray | Média | 1 | Revisão manual |
| TMA-FLASHARRAY-2.3 | Ensure Active Directory accounts are configured to require TLSflasharray · Nível 1 | flasharray | Média | 1 | Revisão manual |
| TMA-FLASHARRAY-2.4 | Ensure LDAP directory services use LDAPS with a configured CA root of trustflasharray · Nível 1 | flasharray | Média | 1 | Automatizada |
| TMA-FLASHARRAY-2.5 | Ensure syslog servers use TLS with a configured CA root of trustflasharray · Nível 1 | flasharray | Média | 1 | Automatizada |
| TMA-FLASHARRAY-2.6 | Ensure the SMTP relay host is configured with STARTTLS encryption and authenticationflasharray · Nível 1 | flasharray | Média | 1 | Automatizada |
| TMA-FLASHARRAY-2.7 | Ensure SNMP, if enabled, uses SNMPv3 with SHA authentication and AES privacyflasharray · Nível 1 | flasharray | Média | 1 | Automatizada |
| TMA-FLASHARRAY-2.9 | Ensure product diagnostic tests for environmental integrations are run periodicallyflasharray · Nível 1 | flasharray | Média | 1 | Revisão manual |
| TMA-FLASHARRAY-3.3 | Ensure native Active Directory integration is used for NFS and SMB identity and authenticationflasharray · Nível 1 | flasharray | Média | 1 | Revisão manual |