Cisco ASA
TMA-CISCO-ASA-1.4.4.2
Ensure 'aaa authorization exec' is configured correctly
HochStufe 1Automatisiertcisco-asa
Beschreibung
Limits the access to the privileged EXEC mode. When a user is placed in the privileged EXEC mode, valuable information can be obtained. The AAA authorization exec enforces the segregation of users rights so that only authorized users can get access to the privileged EXEC mode. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).
So wird geprüft
Prüfmethode: Konfigurationsmuster
- Muster
(?m)^aaa authorization exec \S
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
! Run the following to enable the AAA authorization exec aaa authorization exec authentication-server auto-enable
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- cisco-asanetworkaaa
- Referenz
- CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.4.4.2 Ensure 'aaa authorization exec' is configured correctly
Diesen Host prüfen
Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.
shell
tmaegis scan --target cisco-asa