Ensure Radius or TACACS+ server is configured

Cara pemeriksaan

Metode audit: Pola konfigurasi

Pola

(?m)^(?:add aaa radius-servers priority \d+ host \S+|add aaa tacacs-servers priority \d+ server \S+)

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

set aaa tacacs-servers state on add aaa tacacs-servers priority 1 server <IP> key <key> timeout 5 (or) add aaa radius-servers priority 1 host <IP> secret <key> port 1812 timeout 3 save config # CIS guidance: run the following command to enable and add TACACS+ servers. CLI: set aaa tacacs-servers state on add aaa tacacs-servers priority <priority_value> server <IP_Address> key <Key> timeout <timeout_value> GUI: Navigate to User Management > Authentication Servers > TACACS+ configuration > Ensuere Enable TACACS+ authentication is checked Navigate to User Management > Authentication Servers > TACACS+ configuration > Enable TACACS+ Servers > Add Provide <Server_IP_Address>, <Priority> and <Timeout>. Run the following command to enable and add Radius servers. CLI: add aaa radius-servers priority <priority_value> host <IP_Address> secret <Key> port <Port_number> timeout <timeout_value> GUI: Navigate to User Management > Authentication Servers > Radius Servers > Add Provide <Server_IP_Address>, <Priority>, <UDP_Port> and <Timeout>.

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

tmaegis scan --target checkpoint