CIS Updates Benchmarks for Azure, PostgreSQL, AWS, FortiGate and Aruba

· Original article ↗

Summary

CIS announced updated or newly released benchmarks for Azure and AWS database services, PostgreSQL, FortiGate and HPE Aruba CX Switch, including new configuration-scanning support for the FortiGate benchmark.

Key points

  • The Azure Database Services Benchmark v2.0.0 added 20 recommendations, updated 23 and deleted two; it also removed guidance for retired Azure SQL Edge and Azure Database for MariaDB services.
  • CIS updated its PostgreSQL 13 and PostgreSQL 14 benchmarks to reflect version changes and correct typos.
  • CIS released the AWS Database Services Benchmark v2.0.0.
  • The FortiGate 7.4.x Benchmark adds CIS-CAT configuration scanning, with 32 artifacts created to evaluate configurations.
  • CIS announced an HPE Aruba CX Switch benchmark release.

Article Details

Event Type
Publication and update of CIS security benchmarks
Impact
CIS announced updates or releases for benchmarks covering Microsoft Azure Database Services, PostgreSQL 13 and 14, AWS Database Services, FortiGate 7.4.x, and HPE Aruba CX Switch. The Azure benchmark v2.0.0 added 20 recommendations, updated 23, deleted 2, addressed 67 tickets, and removed coverage of Azure SQL Edge and Azure Database for MariaDB. The FortiGate benchmark v1.0.1 can be scanned with CIS-CAT and includes 32 configuration-evaluation artifacts. The PostgreSQL updates include version-related changes and typo corrections.

People

Products

Tools

Related Articles