Ensure 'Password Recovery' is disabled

HochStufe 1Automatisiertcisco-asa

Beschreibung

Disables the password recovery. Disabling the password recovery is an additional physical control. It will prevent an attacker that will have circumvented all the physical safeguards and being in contact with the security appliance to change the existing login password, enable password and ... Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).

So wird geprüft

Prüfmethode: Konfigurationsmuster

Muster: (?m)^no service password-recovery\s*$

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

! Run the following to disable the password recovery: no service password-recovery

Eigenschaften

Betriebssysteme: Beliebig
Tags: cisco-asanetworkaaa
Referenz: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.1.4 Ensure 'Password Recovery' is disabled

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target cisco-asa