Cisco NX-OS
TMA-CISCO-NXOS-1.2.6
Set the Maximum Number of VTY Sessions
Deskripsi
This sets the maximum number of remote administrative sessions, which in most environments means the maximum number of SSH sessions. This setting prevents an attacker from a resource-exhaustion attack using protocol such as SSH. If there is no limit, an attacker could simply create SSH sessions and leave them in place until the NX-OS host resources (memory) would be exhausted. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).
Cara pemeriksaan
Metode audit: Pola konfigurasi
- Pola
(?m)^line vty[^\n]*\n(?:[ \t][^\n]*\n)*?[ \t]+session-limit \d+
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
line vty session-limit 16
Properti
- Sistem operasi
- Apa saja
- Tag
- cisco-nxosnetworkmanagement-plane
- Referensi
- CIS Cisco NX-OS Benchmark v1.2.0 - 1.2.6 Set the Maximum Number of VTY Sessions
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
tmaegis scan --target cisco-nxos