Enable Password Complexity Requirements for Local Credentials

HochStufe 1Automatisiertcisco-nxos

Beschreibung

While configuring a back-end authentication store is the recommended configuration, at least one local administrative account must be configured. For this reason, ensuring a minimum bar for password strength for all local administrative accounts is important. While in ideal conditions local credentials won't be used, there are many scenarios (such as deployed on a purely public network or on an air gapped network) where this is the only option. Strength checking is on by default; fails if 'no password strength-check' is present. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).

So wird geprüft

Prüfmethode: Konfigurationsmuster

Muster: (?m)^no password strength-check\b

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

! A single command enables this: password strength-check

Eigenschaften

Betriebssysteme: Beliebig
Tags: cisco-nxosnetworkaaa
Referenz: CIS Cisco NX-OS Benchmark v1.2.0 - 1.4.1 Enable Password Complexity Requirements for Local Credentials

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target cisco-nxos