Configure Alerts on all Configuration Changes

中レベル 2手動レビューcisco-nxos

説明

This is not easily implemented directly on the switch. Changes should ideally be backed up remotely, and a "diff" process to highlight any changes in successive configurations is a good process to implement. Change Control processes are ubiquitous in the industry. Especially with a text-based configuration such as most network devices have, it is easy to extract the exact changes from one version of the saved or running configuration to the next. CIS assessment: Manual. Reported as SKIP with review instructions.

チェック方法

監査方法: 手動レビュー

この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。

CIS assessment: Manual. This should be an automated process running on the host that is the repository for daily backups. An assessment should be made on that host.

修正方法

修正方法: ガイダンスまたは IaC パッチ

This is not a process that typically runs on the switch, there is no on-switch remediation.

プロパティ

オペレーティングシステム: すべて
タグ: cisco-nxosnetworkhardening
参照: CIS Cisco NX-OS Benchmark v1.2.0 - 4.3 Configure Alerts on all Configuration Changes