Cisco NX-OS
TMA-CISCO-NXOS-NO-FEATURE-NXAPI
Ensure NX-API is disabled when not used
SedangLevel 2Otomatiscisco-nxos
Deskripsi
NX-API exposes an HTTP/HTTPS programmable interface; disable it unless automation requires it and access is restricted. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).
Cara pemeriksaan
Metode audit: Pola konfigurasi
- Pola
(?m)^feature nxapi\s*$
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
configure terminal no feature nxapi end
Properti
- Sistem operasi
- Apa saja
- Tag
- cisco-nxosnetworkmanagement-plane
- Referensi
- CIS Cisco NX-OS Benchmark - Management Plane / Disable unneeded services (verify section number for your release)
Periksa host ini
Jalankan ini pada mesin yang diizinkan untuk Anda audit. Pemindaian bersifat hanya baca.
shell
tmaegis scan --target cisco-nxos --level 2