Cisco IOS
TMA-CISCO-IOS-1.5.4
Do not set 'RW' for any 'snmp-server community'
Beschreibung
Specifies read-write access. Authorized management stations can both retrieve and modify MIB objects. Enabling SNMP read-write enables remote management of the device. Unless absolutely necessary, do not allow simple network management protocol (SNMP) write access. CIS marks this Manual; automated here because RW communities are visible directly in the running configuration. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all' or 'show startup-config').
So wird geprüft
Prüfmethode: Konfigurationsmuster
- Muster
(?m)(?i)^snmp-server community \S+ (?:view \S+ )?RW\b
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
! Disable SNMP write access. no snmp-server community {write_community_string}
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- cisco-iosnetworksnmp
- Referenz
- CIS Cisco IOS XE 17.x Benchmark v2.2.1 - 1.5.4 Do not set 'RW' for any 'snmp-server community'
Diesen Host prüfen
Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.
tmaegis scan --target cisco-ios