Cisco NX-OS
TMA-CISCO-NXOS-1.2.6
Set the Maximum Number of VTY Sessions
Beschreibung
This sets the maximum number of remote administrative sessions, which in most environments means the maximum number of SSH sessions. This setting prevents an attacker from a resource-exhaustion attack using protocol such as SSH. If there is no limit, an attacker could simply create SSH sessions and leave them in place until the NX-OS host resources (memory) would be exhausted. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).
So wird geprüft
Prüfmethode: Konfigurationsmuster
- Muster
(?m)^line vty[^\n]*\n(?:[ \t][^\n]*\n)*?[ \t]+session-limit \d+
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
line vty session-limit 16
Eigenschaften
- Betriebssysteme
- Beliebig
- Tags
- cisco-nxosnetworkmanagement-plane
- Referenz
- CIS Cisco NX-OS Benchmark v1.2.0 - 1.2.6 Set the Maximum Number of VTY Sessions
Diesen Host prüfen
Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.
tmaegis scan --target cisco-nxos