Ensure 'aaa authentication ssh console' is configured correctly

HochStufe 1Automatisiertcisco-asa

Beschreibung

Authenticates users who access the device using SSH. Using AAA authentication for interactive management access to the device provides consistent, centralized control of your network. The default under AAA (local or network) is to require users to log in using a valid user name and password. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).

So wird geprüft

Prüfmethode: Konfigurationsmuster

Muster: (?m)^aaa authentication ssh console \S

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

! Configure the aaa authentication ssh using the TACACS+ server-group as primary method and the local database as backup method. aaa authentication ssh console <server-group_name> local

Eigenschaften

Betriebssysteme: Beliebig
Tags: cisco-asanetworkaaa
Referenz: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.4.3.4 Ensure 'aaa authentication ssh console' is configured correctly

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target cisco-asa