TMA-OPNSENSE-2.3
Ensure Console Menu is Password Protected
HighLevel 1Automatedopnsense
Description
Set the Console Menu to password protected. An unattended computer with an open Console Menu session to the device could allow an unauthorized user access to the firewall’s management.
How it is checked
Audit method: Configuration pattern
- Pattern
<disableconsolemenu(?:\s*/>|>[^<]*</disableconsolemenu>)
How it is fixed
Fix method: Guidance or infrastructure patch
In the GUI: - Navigate to System > Settings > Administration - Scroll to the 'Console' Section - Ensure 'Password protect the console menu' is checked - Click 'Save'
Properties
- Operating systems
- Any
- Tags
- authopnsense
- Reference
- CIS OPNsense Benchmark v1.0.0 - 2.3 Ensure Console Menu is Password Protected
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target opnsense