RecommendationType Class
- java.
lang. Object - com.
azure. core. util. ExpandableStringEnum<T> - com.
azure. resourcemanager. security. models. RecommendationType
- com.
- com.
public final class RecommendationType
extends ExpandableStringEnum<RecommendationType>
The type of IoT Security recommendation.
Field Summary
| Modifier and Type | Field and Description |
|---|---|
|
static final
Recommendation |
IO_T_ACRAUTHENTICATION
Authentication schema used for pull an edge module from an ACR repository does not use Service Principal Authentication. |
|
static final
Recommendation |
IO_T_AGENT_SENDS_UNUTILIZED_MESSAGES
IoT agent message size capacity is currently underutilized, causing an increase in the number of sent messages. |
|
static final
Recommendation |
IO_T_BASELINE
Identified security related system configuration issues. |
|
static final
Recommendation |
IO_T_EDGE_HUB_MEM_OPTIMIZE
You can optimize Edge Hub memory usage by turning off protocol heads for any protocols not used by Edge modules in your solution. |
|
static final
Recommendation |
IO_T_EDGE_LOGGING_OPTIONS
Logging is disabled for this edge module. |
|
static final
Recommendation |
IO_T_INCONSISTENT_MODULE_SETTINGS
A minority within a device security group has inconsistent Edge Module settings with the rest of their group. |
|
static final
Recommendation |
IO_T_INSTALL_AGENT
Install the Azure Security of Things Agent. |
|
static final
Recommendation |
IO_T_IPFILTER_DENY_ALL
IP Filter Configuration should have rules defined for allowed traffic and should deny all other traffic by default. |
|
static final
Recommendation |
IO_T_IPFILTER_PERMISSIVE_RULE
An Allow IP Filter rules source IP range is too large. |
|
static final
Recommendation |
IO_T_OPEN_PORTS
A listening endpoint was found on the device. |
|
static final
Recommendation |
IO_T_PERMISSIVE_FIREWALL_POLICY
An Allowed firewall policy was found (INPUT/OUTPUT). |
|
static final
Recommendation |
IO_T_PERMISSIVE_INPUT_FIREWALL_RULES
A rule in the firewall has been found that contains a permissive pattern for a wide range of IP addresses or Ports. |
|
static final
Recommendation |
IO_T_PERMISSIVE_OUTPUT_FIREWALL_RULES
A rule in the firewall has been found that contains a permissive pattern for a wide range of IP addresses or Ports. |
|
static final
Recommendation |
IO_T_PRIVILEGED_DOCKER_OPTIONS
Edge module is configured to run in privileged mode, with extensive Linux capabilities or with host-level network access (send/receive data to host machine). |
|
static final
Recommendation |
IO_T_SHARED_CREDENTIALS
Same authentication credentials to the IoT Hub used by multiple devices. |
|
static final
Recommendation |
IO_T_VULNERABLE_TLSCIPHER_SUITE
Insecure TLS configurations detected. |
Constructor Summary
| Constructor | Description |
|---|---|
| RecommendationType() |
Deprecated
Use the fromString(String name) factory method.
Creates a new instance of Recommendation |
Method Summary
| Modifier and Type | Method and Description |
|---|---|
|
static
Recommendation |
fromString(String name)
Creates or finds a Recommendation |
|
static
Collection<Recommendation |
values()
Gets known Recommendation |
Methods inherited from ExpandableStringEnum
Methods inherited from java.lang.Object
Field Details
IO_T_ACRAUTHENTICATION
public static final RecommendationType IO_T_ACRAUTHENTICATION
Authentication schema used for pull an edge module from an ACR repository does not use Service Principal Authentication.
IO_T_AGENT_SENDS_UNUTILIZED_MESSAGES
public static final RecommendationType IO_T_AGENT_SENDS_UNUTILIZED_MESSAGES
IoT agent message size capacity is currently underutilized, causing an increase in the number of sent messages. Adjust message intervals for better utilization.
IO_T_BASELINE
public static final RecommendationType IO_T_BASELINE
Identified security related system configuration issues.
IO_T_EDGE_HUB_MEM_OPTIMIZE
public static final RecommendationType IO_T_EDGE_HUB_MEM_OPTIMIZE
You can optimize Edge Hub memory usage by turning off protocol heads for any protocols not used by Edge modules in your solution.
IO_T_EDGE_LOGGING_OPTIONS
public static final RecommendationType IO_T_EDGE_LOGGING_OPTIONS
Logging is disabled for this edge module.
IO_T_INCONSISTENT_MODULE_SETTINGS
public static final RecommendationType IO_T_INCONSISTENT_MODULE_SETTINGS
A minority within a device security group has inconsistent Edge Module settings with the rest of their group.
IO_T_INSTALL_AGENT
public static final RecommendationType IO_T_INSTALL_AGENT
Install the Azure Security of Things Agent.
IO_T_IPFILTER_DENY_ALL
public static final RecommendationType IO_T_IPFILTER_DENY_ALL
IP Filter Configuration should have rules defined for allowed traffic and should deny all other traffic by default.
IO_T_IPFILTER_PERMISSIVE_RULE
public static final RecommendationType IO_T_IPFILTER_PERMISSIVE_RULE
An Allow IP Filter rules source IP range is too large. Overly permissive rules might expose your IoT hub to malicious intenders.
IO_T_OPEN_PORTS
public static final RecommendationType IO_T_OPEN_PORTS
A listening endpoint was found on the device.
IO_T_PERMISSIVE_FIREWALL_POLICY
public static final RecommendationType IO_T_PERMISSIVE_FIREWALL_POLICY
An Allowed firewall policy was found (INPUT/OUTPUT). The policy should Deny all traffic by default and define rules to allow necessary communication to/from the device.
IO_T_PERMISSIVE_INPUT_FIREWALL_RULES
public static final RecommendationType IO_T_PERMISSIVE_INPUT_FIREWALL_RULES
A rule in the firewall has been found that contains a permissive pattern for a wide range of IP addresses or Ports.
IO_T_PERMISSIVE_OUTPUT_FIREWALL_RULES
public static final RecommendationType IO_T_PERMISSIVE_OUTPUT_FIREWALL_RULES
A rule in the firewall has been found that contains a permissive pattern for a wide range of IP addresses or Ports.
IO_T_PRIVILEGED_DOCKER_OPTIONS
public static final RecommendationType IO_T_PRIVILEGED_DOCKER_OPTIONS
Edge module is configured to run in privileged mode, with extensive Linux capabilities or with host-level network access (send/receive data to host machine).
IO_T_SHARED_CREDENTIALS
public static final RecommendationType IO_T_SHARED_CREDENTIALS
Same authentication credentials to the IoT Hub used by multiple devices. This could indicate an illegitimate device impersonating a legitimate device. It also exposes the risk of device impersonation by an attacker.
IO_T_VULNERABLE_TLSCIPHER_SUITE
public static final RecommendationType IO_T_VULNERABLE_TLSCIPHER_SUITE
Insecure TLS configurations detected. Immediate upgrade recommended.
Constructor Details
RecommendationType
@Deprecated
public RecommendationType()
Deprecated
Creates a new instance of RecommendationType value.
Method Details
fromString
public static RecommendationType fromString(String name)
Creates or finds a RecommendationType from its string representation.
Parameters:
Returns:
values
public static Collection<RecommendationType> values()
Gets known RecommendationType values.
Returns: