Ensure 'Image Integrity' is correct

MoyenneNiveau 1Revue manuellecisco-asa

Description

Verifies integrity of an uploaded software before upgrading the system. While software is downloaded from the internet it can be corrupted, as a result, the image integrity should be verified before upgrading the system with the downloaded software. CIS assessment: Manual. Reported as SKIP with review instructions.

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

CIS assessment: Manual. - Step 1: Acquire the location in the security appliance of the new image <new_image_location> and the MD5 checksum <md5_checksum> from the Cisco.com Website - Step 2: Run the following command to verify that the MD5 checksum value of the new image matches the one provided on the Cisco.com Website hostname#verify <new_image_location> <md5_checksum> Example: Asa-fw# verify disk0:asa9xx-6-k8.bin 76b5448039e642099334abbfec5a8705 Verifying file integrity of disk0:/asa9xx-6-k8.bin!!!!!!!!!!!!!!!!!! ...

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

Download a new image from the Cisco.com website and apply the audit procedure until obtaining the message 'Verified' at the end of the output.

Propriétés

Systèmes d'exploitation: Tous
Étiquettes: cisco-asanetworkhardening
Référence: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.3.1 Ensure 'Image Integrity' is correct