Configure Alerts on all Configuration Changes

MediumLevel 2Manual reviewcisco-nxos

Description

This is not easily implemented directly on the switch. Changes should ideally be backed up remotely, and a "diff" process to highlight any changes in successive configurations is a good process to implement. Change Control processes are ubiquitous in the industry. Especially with a text-based configuration such as most network devices have, it is easy to extract the exact changes from one version of the saved or running configuration to the next. CIS assessment: Manual. Reported as SKIP with review instructions.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

CIS assessment: Manual. This should be an automated process running on the host that is the repository for daily backups. An assessment should be made on that host.

How it is fixed

Fix method: Guidance or infrastructure patch

This is not a process that typically runs on the switch, there is no on-switch remediation.

Properties

Operating systems: Any
Tags: cisco-nxosnetworkhardening
Reference: CIS Cisco NX-OS Benchmark v1.2.0 - 4.3 Configure Alerts on all Configuration Changes