TMA-CISCO-ASA-1.4.1.3

Ensure known default accounts do not exist

높음레벨 1자동cisco-asa

설명

Deletes the known default accounts configured. In order to attempt access to known devices' platforms, attackers use the available database of the known default accounts for each platform or Operating System. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).

점검 방법

감사 방식: 구성 패턴

패턴: (?m)(?i)^username (?:admin|asa|cisco|pix|root)\s

조치 방법

조치 방식: 가이드 또는 인프라 패치

! - Step 1: Acquire the Enterprise customized administrative account <customized_admin_account> and password <admin_password> - Step 2: Run the following to create the customized administrative account as well as the required privilege level <privilege_level> username <customized_admin_account> password <admin_password> privilege <privilege_level> - Step 3: Run the following to delete the known default accounts identified during the audit no username <known_default_account>

속성

운영 체제: 모두
태그: cisco-asanetworkaaa
참고 자료: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.4.1.3 Ensure known default accounts do not exist

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target cisco-asa