RecommendationType Class

public final class RecommendationType
extends ExpandableStringEnum<RecommendationType>

The type of IoT Security recommendation.

Field Summary

Modifier and Type Field and Description
static final RecommendationType IO_T_ACRAUTHENTICATION

Authentication schema used for pull an edge module from an ACR repository does not use Service Principal Authentication.

static final RecommendationType IO_T_AGENT_SENDS_UNUTILIZED_MESSAGES

IoT agent message size capacity is currently underutilized, causing an increase in the number of sent messages.

static final RecommendationType IO_T_BASELINE

Identified security related system configuration issues.

static final RecommendationType IO_T_EDGE_HUB_MEM_OPTIMIZE

You can optimize Edge Hub memory usage by turning off protocol heads for any protocols not used by Edge modules in your solution.

static final RecommendationType IO_T_EDGE_LOGGING_OPTIONS

Logging is disabled for this edge module.

static final RecommendationType IO_T_INCONSISTENT_MODULE_SETTINGS

A minority within a device security group has inconsistent Edge Module settings with the rest of their group.

static final RecommendationType IO_T_INSTALL_AGENT

Install the Azure Security of Things Agent.

static final RecommendationType IO_T_IPFILTER_DENY_ALL

IP Filter Configuration should have rules defined for allowed traffic and should deny all other traffic by default.

static final RecommendationType IO_T_IPFILTER_PERMISSIVE_RULE

An Allow IP Filter rules source IP range is too large.

static final RecommendationType IO_T_OPEN_PORTS

A listening endpoint was found on the device.

static final RecommendationType IO_T_PERMISSIVE_FIREWALL_POLICY

An Allowed firewall policy was found (INPUT/OUTPUT).

static final RecommendationType IO_T_PERMISSIVE_INPUT_FIREWALL_RULES

A rule in the firewall has been found that contains a permissive pattern for a wide range of IP addresses or Ports.

static final RecommendationType IO_T_PERMISSIVE_OUTPUT_FIREWALL_RULES

A rule in the firewall has been found that contains a permissive pattern for a wide range of IP addresses or Ports.

static final RecommendationType IO_T_PRIVILEGED_DOCKER_OPTIONS

Edge module is configured to run in privileged mode, with extensive Linux capabilities or with host-level network access (send/receive data to host machine).

static final RecommendationType IO_T_SHARED_CREDENTIALS

Same authentication credentials to the IoT Hub used by multiple devices.

static final RecommendationType IO_T_VULNERABLE_TLSCIPHER_SUITE

Insecure TLS configurations detected.

Constructor Summary

Constructor Description
RecommendationType()

Deprecated

Use the fromString(String name) factory method.

Creates a new instance of RecommendationType value.

Method Summary

Modifier and Type Method and Description
static RecommendationType fromString(String name)

Creates or finds a RecommendationType from its string representation.

static Collection<RecommendationType> values()

Gets known RecommendationType values.

Methods inherited from ExpandableStringEnum

Methods inherited from java.lang.Object

Field Details

IO_T_ACRAUTHENTICATION

public static final RecommendationType IO_T_ACRAUTHENTICATION

Authentication schema used for pull an edge module from an ACR repository does not use Service Principal Authentication.

IO_T_AGENT_SENDS_UNUTILIZED_MESSAGES

public static final RecommendationType IO_T_AGENT_SENDS_UNUTILIZED_MESSAGES

IoT agent message size capacity is currently underutilized, causing an increase in the number of sent messages. Adjust message intervals for better utilization.

IO_T_BASELINE

public static final RecommendationType IO_T_BASELINE

Identified security related system configuration issues.

IO_T_EDGE_HUB_MEM_OPTIMIZE

public static final RecommendationType IO_T_EDGE_HUB_MEM_OPTIMIZE

You can optimize Edge Hub memory usage by turning off protocol heads for any protocols not used by Edge modules in your solution.

IO_T_EDGE_LOGGING_OPTIONS

public static final RecommendationType IO_T_EDGE_LOGGING_OPTIONS

Logging is disabled for this edge module.

IO_T_INCONSISTENT_MODULE_SETTINGS

public static final RecommendationType IO_T_INCONSISTENT_MODULE_SETTINGS

A minority within a device security group has inconsistent Edge Module settings with the rest of their group.

IO_T_INSTALL_AGENT

public static final RecommendationType IO_T_INSTALL_AGENT

Install the Azure Security of Things Agent.

IO_T_IPFILTER_DENY_ALL

public static final RecommendationType IO_T_IPFILTER_DENY_ALL

IP Filter Configuration should have rules defined for allowed traffic and should deny all other traffic by default.

IO_T_IPFILTER_PERMISSIVE_RULE

public static final RecommendationType IO_T_IPFILTER_PERMISSIVE_RULE

An Allow IP Filter rules source IP range is too large. Overly permissive rules might expose your IoT hub to malicious intenders.

IO_T_OPEN_PORTS

public static final RecommendationType IO_T_OPEN_PORTS

A listening endpoint was found on the device.

IO_T_PERMISSIVE_FIREWALL_POLICY

public static final RecommendationType IO_T_PERMISSIVE_FIREWALL_POLICY

An Allowed firewall policy was found (INPUT/OUTPUT). The policy should Deny all traffic by default and define rules to allow necessary communication to/from the device.

IO_T_PERMISSIVE_INPUT_FIREWALL_RULES

public static final RecommendationType IO_T_PERMISSIVE_INPUT_FIREWALL_RULES

A rule in the firewall has been found that contains a permissive pattern for a wide range of IP addresses or Ports.

IO_T_PERMISSIVE_OUTPUT_FIREWALL_RULES

public static final RecommendationType IO_T_PERMISSIVE_OUTPUT_FIREWALL_RULES

A rule in the firewall has been found that contains a permissive pattern for a wide range of IP addresses or Ports.

IO_T_PRIVILEGED_DOCKER_OPTIONS

public static final RecommendationType IO_T_PRIVILEGED_DOCKER_OPTIONS

Edge module is configured to run in privileged mode, with extensive Linux capabilities or with host-level network access (send/receive data to host machine).

IO_T_SHARED_CREDENTIALS

public static final RecommendationType IO_T_SHARED_CREDENTIALS

Same authentication credentials to the IoT Hub used by multiple devices. This could indicate an illegitimate device impersonating a legitimate device. It also exposes the risk of device impersonation by an attacker.

IO_T_VULNERABLE_TLSCIPHER_SUITE

public static final RecommendationType IO_T_VULNERABLE_TLSCIPHER_SUITE

Insecure TLS configurations detected. Immediate upgrade recommended.

Constructor Details

RecommendationType

@Deprecated
public RecommendationType()

Deprecated

Use the fromString(String name) factory method.

Creates a new instance of RecommendationType value.

Method Details

fromString

public static RecommendationType fromString(String name)

Creates or finds a RecommendationType from its string representation.

Parameters:

name - a name to look for.

Returns:

the corresponding RecommendationType.

values

public static Collection<RecommendationType> values()

Gets known RecommendationType values.

Returns:

known RecommendationType values.

Applies to