TMA-CISCO-ASA-1.4.5.3
Ensure 'aaa accounting for EXEC mode' is configured correctly
높음레벨 1자동cisco-asa
설명
Enables accounting of administrative access by specifying the start and stop of EXEC sessions. The AAA accounting feature enables to track the actions performed by users and to store the data collected into AAA serves for further audit or further analysis. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).
점검 방법
감사 방식: 구성 패턴
- 패턴
(?m)^aaa accounting enable console \S
조치 방법
조치 방식: 가이드 또는 인프라 패치
! Run the following in order to record exec mode session start and stop and to send them to the AAA servers aaa accounting enable console <server-group_name>
속성
- 운영 체제
- 모두
- 태그
- cisco-asanetworklogging
- 참고 자료
- CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.4.5.3 Ensure 'aaa accounting for EXEC mode' is configured correctly
이 호스트 점검하기
감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.
shell
tmaegis scan --target cisco-asa