Cisco NX-OS
TMA-CISCO-NXOS-4.3
Configure Alerts on all Configuration Changes
Deskripsi
This is not easily implemented directly on the switch. Changes should ideally be backed up remotely, and a "diff" process to highlight any changes in successive configurations is a good process to implement. Change Control processes are ubiquitous in the industry. Especially with a text-based configuration such as most network devices have, it is easy to extract the exact changes from one version of the saved or running configuration to the next. CIS assessment: Manual. Reported as SKIP with review instructions.
Cara pemeriksaan
Metode audit: Tinjauan manual
CIS assessment: Manual. This should be an automated process running on the host that is the repository for daily backups. An assessment should be made on that host.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
This is not a process that typically runs on the switch, there is no on-switch remediation.
Properti
- Sistem operasi
- Apa saja
- Tag
- cisco-nxosnetworkhardening
- Referensi
- CIS Cisco NX-OS Benchmark v1.2.0 - 4.3 Configure Alerts on all Configuration Changes