SonicWALL -  Ensure default 'admin' username is not used

800-53|IA-5

CSCv6|5.3

800-53|CM-6b.

CSCv6|3.1

SonicWALL - AAA - RADIUS server is trusted

800-53|SI-3

SonicWALL - AutoDownload Firmware - Enabled

800-53|SI-2c.

800-53|CM-8

SonicWALL - Client AV Enforcement On - DMZ

SonicWALL - Client AV Enforcement On - LAN

SonicWALL - Client AV Enforcement On - WLAN

800-53|AC-4

SonicWALL - Detection Prevention - ICMP packets

800-53|SC-7

SonicWALL - Detection Prevention - IP TTL Decrement

800-53|SC-10

SonicWALL - Detection Prevention - Randomize IP IDs

SonicWALL - Detection Prevention - Stealth Mode

SonicWALL - Disable insecure services - HTTP

CSCv6|9.1

SonicWALL - Flood Protection - Layer 2 - All Interfaces

800-53|SC-5

SonicWALL - Flood Protection - Layer 2 - Threshold

SonicWALL - Flood Protection - Layer 2 - WAN machines

SonicWALL - Flood Protection - Layer 3 - Attack Threshold

SonicWALL - Flood Protection - Layer 3 - Protection Mode

SonicWALL - Flood Protection - TCP - checksum enforcement

SonicWALL - Flood Protection - TCP - Enforce compliance

SonicWALL - Flood Protection - TCP - Handshake enforcement

SonicWALL - Flood Protection - TCP - Max Seg Lifetime

SonicWALL - Flood Protection - TCP - Timeout <= 5 minutes

800-53|SI-4

800-53|AU-5(2)

800-53|AU-12c.

800-53|AC-8

SonicWALL - Password Policy - Affected User types

SonicWALL - Password Policy - Affected User types - full-admins

SonicWALL - Password Policy - Affected User types - limited-admins

SonicWALL - Password Policy - Change Period <=30 days

SonicWALL - Password Policy - Complexity Level

SonicWALL - Password Policy - minimum length >= 8

SonicWALL - Password Policy - Password Uniqueness >= 10

SonicWALL - Password Policy - User Lockout - Enabled

SonicWALL - PW Policy - Lockout - Num Attempts <=3

800-53|AC-7

SonicWALL - PW Policy - Lockout Duration - >= 5 minutes

SonicWALL - Review the DNS Server Settings

800-53|SC-20

SonicWALL - Review the NTP server configuration

800-53|AU-8(1)

CSCv6|6.1

SonicWALL - Security Services - Client AV - Enabled

SonicWALL - Security Services - Gateway AV - Activated

SonicWALL - Security Services - Gateway AV - CIFS/Netbios

SonicWALL - Security Services - Gateway AV - Enabled

SonicWALL - Security Services - Gateway AV - FTP Inbound

SonicWALL - Security Services - Gateway AV - FTP Outbound

SonicWALL - Security Services - Gateway AV - HTTP Inbound

SonicWALL - Security Services - Gateway AV - HTTP Outbound

SonicWALL - Security Services - Gateway AV - IMAP

SonicWALL - Security Services - Gateway AV - POP3

SonicWALL - Security Services - Gateway AV - Signature Timestamp

800-53|AU-8

SonicWALL - Security Services - Gateway AV - SMTP Inbound

SonicWALL - Security Services - Gateway AV - SMTP Outbound

SonicWALL - Security Services - Gateway AV - TCP Stream Inbound

SonicWALL - Security Services - Gateway AV - TCP Stream Outbound

SonicWALL - Security Services - IDP - Activated

SonicWALL - Security Services - IDP - Enabled

SonicWALL - Security Services - IDP - Signature DB Present

SonicWALL - Security Services - IDP - Signature Timestamp

SonicWALL - Security Services - Settings - Max Security

SonicWALL - SNMP Community Name - 'public' or 'private'

SonicWALL - SSL Control - Block the conn. and log the event

SonicWALL - SSL Control - Certs - Untrusted CA

SonicWALL - SSL Control - Detect Expired Certificates

SonicWALL - SSL Control - Detect MD5 Digest

SonicWALL - SSL Control - Detect Self-signed certs

SonicWALL - SSL Control - Detect Weak Ciphers (<64 bits)

SonicWALL - SSL Control - Enable Blacklist

SonicWALL - SSL Control - Enable SSL Control

SonicWALL - SSL Control - Enable Whitelist

SonicWALL - Syslog server - >=1 server configured

800-53|CM-8a.

SonicWALL - Use non default admin access ports - 'SSH'

SonicWALL - Use non default admin access ports - HTTP

SonicWALL - Use non default admin access ports - HTTPS

SonicWALL - User Inactivity Timeout - 5 minutes or less

Detections

Analytics

Revision 1.6

Mar 1, 2022

Functional Update

Miscellaneous