Automate Server Best Practice Ticket
This document outlines the process of auditing and establishing hardening rules and policies for ConnectWise Automate servers based on the latest guidelines. It includes a detailed description of the variables involved, the processes executed, and the expected output, aimed at enhancing server security and compliance.
cPVAL TLS Client Enabled
This stores the TLS Client Enabled state.
cPVAL TLS Server Enabled
This stores the TLS Server enabled.
Enabled TLS Version Audit
This group shows the agents where the "TLS Enabled List Audit" script is executed to collect the enabled TLS versions audit list.
Enforce TLS SSL Hardening
This PowerShell script enforces TLS/SSL hardening by disabling insecure protocols (SSL 3.0, TLS 1.0, TLS 1.1) and removing specified weak TLS 1.2 cipher suites to strengthen system security and align with modern security standards.
Hardening ConnectWise Automate
This document outlines the best practices for hardening ConnectWise Automate, including user accounts, group policy edits, internet access considerations, and critical passwords. It also covers firewall settings and TLS configurations to enhance security.
Hardening ConnectWise ScreenConnect
This document outlines the best practices for hardening ConnectWise ScreenConnect, including user accounts, group policy edits, internet access considerations, and critical passwords. It also covers firewall settings and TLS configurations to enhance security.
TLS Enabled List Audit
This PowerShell script shows the list of TLS servers, and client are enabled.
TLS Version Audit
This solution is built to audit the tls version audit.
Validate TLS SSL Hardening
This script validates whether insecure SSL/TLS protocols and specified weak TLS 1.2 cipher suites have been successfully disabled on the target system.