Ensure 'aaa accounting for EXEC mode' is configured correctly

AltaNivel 1Automatizadacisco-asa

Descripción

Enables accounting of administrative access by specifying the start and stop of EXEC sessions. The AAA accounting feature enables to track the actions performed by users and to store the data collected into AAA serves for further audit or further analysis. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).

Cómo se verifica

Método de auditoría: Patrón de configuración

Patrón: (?m)^aaa accounting enable console \S

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

! Run the following in order to record exec mode session start and stop and to send them to the AAA servers aaa accounting enable console <server-group_name>

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: cisco-asanetworklogging
Referencia: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.4.5.3 Ensure 'aaa accounting for EXEC mode' is configured correctly

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target cisco-asa