Two-factor authentication with the https-server server

TinggiLevel 1Otomatisaruba-cx

Deskripsi

Two-factor authentication provides an additional level of security by requiring administrators to perform X.509 certificate-based authentication with the AOS-CX https- server. The two factors are possession of the certificate private key and knowledge of the password associated with the certificate private key. The switch must be configured with the corresponding CA certificate which issued the administrator's certificate. PASS requires certificate (two-factor) authentication on the https-server. Audited against AOS-CX 'show running-config' output (saved in full); context blocks such as 'password complexity' or 'cli-session' are matched by their indented member lines.

Cara pemeriksaan

Metode audit: Pola konfigurasi

Pola: (?m)^https-server authentication certificate\b

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

https-server authentication certificate authorization radius username common_name # CIS guidance: https-server authentication certificate authorization radius username common_name

Properti

Sistem operasi: Apa saja
Tag: aruba-cxauthentication
Referensi: CIS HPE Aruba Networking CX Switch Benchmark v1.0.1 - 1.9.3 Two-factor authentication with the https-server server

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target aruba-cx