Cisco ASA
TMA-CISCO-ASA-1.4.4.2
Ensure 'aaa authorization exec' is configured correctly
TinggiLevel 1Otomatiscisco-asa
Deskripsi
Limits the access to the privileged EXEC mode. When a user is placed in the privileged EXEC mode, valuable information can be obtained. The AAA authorization exec enforces the segregation of users rights so that only authorized users can get access to the privileged EXEC mode. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).
Cara pemeriksaan
Metode audit: Pola konfigurasi
- Pola
(?m)^aaa authorization exec \S
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
! Run the following to enable the AAA authorization exec aaa authorization exec authentication-server auto-enable
Properti
- Sistem operasi
- Apa saja
- Tag
- cisco-asanetworkaaa
- Referensi
- CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.4.4.2 Ensure 'aaa authorization exec' is configured correctly
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
shell
tmaegis scan --target cisco-asa