Ensure 'aaa authentication http console' is configured correctly

TinggiLevel 1Otomatiscisco-asa

Deskripsi

Authenticates ASDM users who access the security appliance over HTTP. By default, the enable password is used in combination with no username for http access. The aaa command is used to define the TACACS+/RADIUS authentication method. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).

Cara pemeriksaan

Metode audit: Pola konfigurasi

Pola: (?m)^aaa authentication http console \S

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

! Configure the aaa authentication for http using the TACACS+ server-group as primary method and the local database as backup method. aaa authentication http console <server-group_name> local

Properti

Sistem operasi: Apa saja
Tag: cisco-asanetworkaaa
Referensi: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.4.3.2 Ensure 'aaa authentication http console' is configured correctly

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target cisco-asa