TMA-CISCO-ASA-1.6.2
Ensure 'SSH version 2' is enabled
HighLevel 1Automatedcisco-asa
Description
Sets the SSH version to 2. SSH is an application running on top of a reliable transport layer, such as TCP/IP, that provides strong authentication and encryption capabilities. The ASA allows SSH connections to the ASA for management purposes. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).
How it is checked
Audit method: Configuration pattern
- Pattern
(?m)^ssh version 2\s*$
How it is fixed
Fix method: Guidance or infrastructure patch
! Run the following to enable SSH version 2 ssh version 2
Properties
- Operating systems
- Any
- Tags
- cisco-asanetworkmanagement-plane
- Reference
- CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.6.2 Ensure 'SSH version 2' is enabled
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target cisco-asa