Ensure 'Image Integrity' is correct

SedangLevel 1Tinjauan manualcisco-asa

Deskripsi

Verifies integrity of an uploaded software before upgrading the system. While software is downloaded from the internet it can be corrupted, as a result, the image integrity should be verified before upgrading the system with the downloaded software. CIS assessment: Manual. Reported as SKIP with review instructions.

Cara pemeriksaan

Metode audit: Tinjauan manual

Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.

CIS assessment: Manual. - Step 1: Acquire the location in the security appliance of the new image <new_image_location> and the MD5 checksum <md5_checksum> from the Cisco.com Website - Step 2: Run the following command to verify that the MD5 checksum value of the new image matches the one provided on the Cisco.com Website hostname#verify <new_image_location> <md5_checksum> Example: Asa-fw# verify disk0:asa9xx-6-k8.bin 76b5448039e642099334abbfec5a8705 Verifying file integrity of disk0:/asa9xx-6-k8.bin!!!!!!!!!!!!!!!!!! ...

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

Download a new image from the Cisco.com website and apply the audit procedure until obtaining the message 'Verified' at the end of the output.

Properti

Sistem operasi: Apa saja
Tag: cisco-asanetworkhardening
Referensi: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.3.1 Ensure 'Image Integrity' is correct