Ensure GPG keys are configured – apt-key list
Details It is important to ensure that updates are obtained from a valid source to protect against spoofing that could...
- Home
- Security Hardening
- Tenable Cisco Firepower Management Center OS Best Practices
Tenable Cisco Firepower Management Center OS Best Practices
Ensure GPG keys are configured – yum
Details It is important to ensure that updates are obtained from a valid source to protect against spoofing that could...Ensure HTTP Proxy Server is not enabled
Details Squid is a standard proxy server used in many distributions and environments. Solution Run one of the following commands...Ensure HTTP server is not enabled
Details HTTP or web servers provide the ability to host web site content. Solution Run one of the following commands...Ensure ICMP redirects are not accepted – /etc/sysctl ipv4 all accept
Details ICMP redirect messages are packets that convey routing information and tell your host (acting as a router) to send...Ensure ICMP redirects are not accepted – /etc/sysctl ipv4 default accept
Details ICMP redirect messages are packets that convey routing information and tell your host (acting as a router) to send...Ensure ICMP redirects are not accepted – sysctl ipv4 all accept
Details ICMP redirect messages are packets that convey routing information and tell your host (acting as a router) to send...Ensure ICMP redirects are not accepted – sysctl ipv4 default accept
Details ICMP redirect messages are packets that convey routing information and tell your host (acting as a router) to send...Ensure IMAP and POP3 server is not enabled
Details dovecot is an open source IMAP and POP3 server for Linux based systems. Solution Run one of the following...Ensure inactive password lock is 30 days or less
Details User accounts that have been inactive for over a given period of time can be automatically disabled. It is...