Ensure NX-API is disabled when not used

MediumLevel 2Automatedcisco-nxos

Description

NX-API exposes an HTTP/HTTPS programmable interface; disable it unless automation requires it and access is restricted. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).

How it is checked

Audit method: Configuration pattern

Pattern: (?m)^feature nxapi\s*$

How it is fixed

Fix method: Guidance or infrastructure patch

configure terminal no feature nxapi end

Properties

Operating systems: Any
Tags: cisco-nxosnetworkmanagement-plane
Reference: CIS Cisco NX-OS Benchmark - Management Plane / Disable unneeded services (verify section number for your release)

Check this host

Run this on a machine you are allowed to audit. The scan is read-only.

shell

tmaegis scan --target cisco-nxos --level 2