Cisco NX-OS
TMA-CISCO-NXOS-4.3
Configure Alerts on all Configuration Changes
Descripción
This is not easily implemented directly on the switch. Changes should ideally be backed up remotely, and a "diff" process to highlight any changes in successive configurations is a good process to implement. Change Control processes are ubiquitous in the industry. Especially with a text-based configuration such as most network devices have, it is easy to extract the exact changes from one version of the saved or running configuration to the next. CIS assessment: Manual. Reported as SKIP with review instructions.
Cómo se verifica
Método de auditoría: Revisión manual
CIS assessment: Manual. This should be an automated process running on the host that is the repository for daily backups. An assessment should be made on that host.
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
This is not a process that typically runs on the switch, there is no on-switch remediation.
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- cisco-nxosnetworkhardening
- Referencia
- CIS Cisco NX-OS Benchmark v1.2.0 - 4.3 Configure Alerts on all Configuration Changes