Enable 'service password-encryption'

TinggiLevel 1Otomatiscisco-ios

Deskripsi

When password encryption is enabled, the encrypted form of the passwords is displayed when a more system:running-config command is entered. This requires passwords to be encrypted in the configuration file to prevent unauthorized users from learning the passwords just by reading the configuration. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all' or 'show startup-config').

Cara pemeriksaan

Metode audit: Pola konfigurasi

Pola: (?m)^service password-encryption\s*$

Cara perbaikan

Metode perbaikan: Panduan atau patch infrastruktur

! Enable password encryption service to protect sensitive access passwords in the device configuration. service password-encryption

Properti

Sistem operasi: Apa saja
Tag: cisco-iosnetworkaaa
Referensi: CIS Cisco IOS XE 17.x Benchmark v2.2.1 - 1.4.2 Enable 'service password-encryption'

Periksa host ini

Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.

shell

tmaegis scan --target cisco-ios