Configure Alerts on all Configuration Changes

MittelStufe 2Manuelle Prüfungcisco-nxos

Beschreibung

This is not easily implemented directly on the switch. Changes should ideally be backed up remotely, and a "diff" process to highlight any changes in successive configurations is a good process to implement. Change Control processes are ubiquitous in the industry. Especially with a text-based configuration such as most network devices have, it is easy to extract the exact changes from one version of the saved or running configuration to the next. CIS assessment: Manual. Reported as SKIP with review instructions.

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

CIS assessment: Manual. This should be an automated process running on the host that is the repository for daily backups. An assessment should be made on that host.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

This is not a process that typically runs on the switch, there is no on-switch remediation.

Eigenschaften

Betriebssysteme: Beliebig
Tags: cisco-nxosnetworkhardening
Referenz: CIS Cisco NX-OS Benchmark v1.2.0 - 4.3 Configure Alerts on all Configuration Changes