Enable SSHv2

HochStufe 1Automatisiertcisco-ftd

Beschreibung

SSHv2 is the preferred choice for secure remote access. Once configured it allows for an encrypted connection to the remote device. SSHv1 is deprecated and is no longer recommended. Checks the LINA config pushed by FMC Platform Settings > Secure Shell: fails without an 'ssh <ip> <mask> <ifname>' entry or when SSH is allowed from any address. Automated checks run against the FTD LINA configuration from 'show running-config' on the FTD CLI (configuration is pushed by the FMC); FMC GUI settings are manual checks.

So wird geprüft

Prüfmethode: Konfigurationsmuster

Muster: (?m)(?:\A(?:[ \t]*(?:$|[^s \t\n]|s(?:$|[^s\n]|s(?:$|[^h\n]|h(?:$|[^ \n]| (?:$|[^123456789\n])))))[^\n]*\n)*(?:[ \t]*(?:$|[^s \t\n]|s(?:$|[^s\n]|s(?:$|[^h\n]|h(?:$|[^ \n]| (?:$|[^123456789\n])))))[^\n]*)?\z)|(?:^ssh (?:0\.0\.0\.0 0\.0\.0\.0|::/0|0::0/0) )

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Devices > Platform Settings > Secure Shell 1. Click Add 2. Enter in IP addresses or Range 3. Select Zone/Interface

Eigenschaften

Betriebssysteme: Beliebig
Tags: cisco-ftdnetworkmanagement-plane
Referenz: CIS Cisco Firepower Threat Defense Benchmark v1.0.0 - 1.1.2.2 Enable SSHv2

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target cisco-ftd