规则浏览器
浏览目录中的每一条加固规则。可按平台、严重程度、配置级别以及是否支持自动化检查进行筛选。
找到 36 条规则共 8,597 条第 1 / 2 页
| ID | 标题 | 平台 | 严重程度 | 级别 | 检查方式 |
|---|---|---|---|---|---|
| TMA-FLASHARRAY-1.6 | Ensure brute-force lockout is set to 3 attempts with a lockout duration of at least 1 hourflasharray · 级别 1 | flasharray | 高 | 1 | 自动化 |
| TMA-FLASHARRAY-1.7 | Ensure the password policy enforces 8+ characters, 3+ character groups, and username and dictionary checksflasharray · 级别 1 | flasharray | 高 | 1 | 自动化 |
| TMA-FLASHARRAY-3.1 | Ensure NFS export policies restrict client access and enforce secure authentication (no wildcards, root squash, no sys auth)flasharray · 级别 1 | flasharray | 高 | 1 | 自动化 |
| TMA-FLASHARRAY-3.2 | Ensure SMB client policies require encryption, restrict client access, and disable anonymous accessflasharray · 级别 1 | flasharray | 高 | 1 | 自动化 |
| TMA-FLASHARRAY-4.1 | Ensure manual eradication is disabled and the eradication delay is at least 8 days for production dataflasharray · 级别 1 | flasharray | 高 | 1 | 自动化 |
| TMA-FLASHARRAY-1.1 | Ensure a management SAML SSO configuration is created and enabledflasharray · 级别 1 | flasharray | 中 | 1 | 人工审核 |
| TMA-FLASHARRAY-1.2 | Ensure a management LDAP/Active Directory service is configured and enabled with at least one group mappedflasharray · 级别 1 | flasharray | 中 | 1 | 人工审核 |
| TMA-FLASHARRAY-1.3 | Ensure only authorized local administrative accounts exist and a local emergency-access account is retainedflasharray · 级别 1 | flasharray | 中 | 1 | 人工审核 |
| TMA-FLASHARRAY-1.4 | Ensure administrators and directory groups are granted least- privilege roles via management access policiesflasharray · 级别 1 | flasharray | 中 | 1 | 人工审核 |
| TMA-FLASHARRAY-1.5 | Ensure SSH key-based authentication is configured for CLI access, preferably sourced from LDAPflasharray · 级别 1 | flasharray | 中 | 1 | 人工审核 |
| TMA-FLASHARRAY-1.8 | Ensure OAuth API clients use least-privilege access policies and access-token TTLs of 60 minutes or lessflasharray · 级别 1 | flasharray | 中 | 1 | 人工审核 |
| TMA-FLASHARRAY-1.9 | Ensure static REST API tokens are used only when necessary and configured to expire periodicallyflasharray · 级别 1 | flasharray | 中 | 1 | 人工审核 |
| TMA-FLASHARRAY-1.10 | Ensure administrative audit logs are forwarded to remote syslog or monitored via the REST APIflasharray · 级别 1 | flasharray | 中 | 1 | 人工审核 |
| TMA-FLASHARRAY-1.11 | Ensure administrative session logs are forwarded to remote syslog or monitored via the REST APIflasharray · 级别 1 | flasharray | 中 | 1 | 人工审核 |
| TMA-FLASHARRAY-1.12 | Ensure system alerts are actively monitored via remote syslog or email alert watchersflasharray · 级别 1 | flasharray | 中 | 1 | 人工审核 |
| TMA-FLASHARRAY-1.13 | Ensure at least one alert watcher is configured to receive alerts of all severitiesflasharray · 级别 1 | flasharray | 中 | 1 | 自动化 |
| TMA-FLASHARRAY-1.14 | Ensure at least one remote management syslog server is configuredflasharray · 级别 1 | flasharray | 中 | 1 | 自动化 |
| TMA-FLASHARRAY-2.1 | Ensure array TLS certificates are CA-signed, adequately sized, and rotated at least every 90 daysflasharray · 级别 1 | flasharray | 中 | 1 | 人工审核 |
| TMA-FLASHARRAY-2.3 | Ensure Active Directory accounts are configured to require TLSflasharray · 级别 1 | flasharray | 中 | 1 | 人工审核 |
| TMA-FLASHARRAY-2.4 | Ensure LDAP directory services use LDAPS with a configured CA root of trustflasharray · 级别 1 | flasharray | 中 | 1 | 自动化 |
| TMA-FLASHARRAY-2.5 | Ensure syslog servers use TLS with a configured CA root of trustflasharray · 级别 1 | flasharray | 中 | 1 | 自动化 |
| TMA-FLASHARRAY-2.6 | Ensure the SMTP relay host is configured with STARTTLS encryption and authenticationflasharray · 级别 1 | flasharray | 中 | 1 | 自动化 |
| TMA-FLASHARRAY-2.7 | Ensure SNMP, if enabled, uses SNMPv3 with SHA authentication and AES privacyflasharray · 级别 1 | flasharray | 中 | 1 | 自动化 |
| TMA-FLASHARRAY-2.9 | Ensure product diagnostic tests for environmental integrations are run periodicallyflasharray · 级别 1 | flasharray | 中 | 1 | 人工审核 |
| TMA-FLASHARRAY-3.3 | Ensure native Active Directory integration is used for NFS and SMB identity and authenticationflasharray · 级别 1 | flasharray | 中 | 1 | 人工审核 |