Ensure 'Image Integrity' is correct

MediumLevel 1Manual reviewcisco-asa

Description

Verifies integrity of an uploaded software before upgrading the system. While software is downloaded from the internet it can be corrupted, as a result, the image integrity should be verified before upgrading the system with the downloaded software. CIS assessment: Manual. Reported as SKIP with review instructions.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

CIS assessment: Manual. - Step 1: Acquire the location in the security appliance of the new image <new_image_location> and the MD5 checksum <md5_checksum> from the Cisco.com Website - Step 2: Run the following command to verify that the MD5 checksum value of the new image matches the one provided on the Cisco.com Website hostname#verify <new_image_location> <md5_checksum> Example: Asa-fw# verify disk0:asa9xx-6-k8.bin 76b5448039e642099334abbfec5a8705 Verifying file integrity of disk0:/asa9xx-6-k8.bin!!!!!!!!!!!!!!!!!! ...

How it is fixed

Fix method: Guidance or infrastructure patch

Download a new image from the Cisco.com website and apply the audit procedure until obtaining the message 'Verified' at the end of the output.

Properties

Operating systems: Any
Tags: cisco-asanetworkhardening
Reference: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.3.1 Ensure 'Image Integrity' is correct