Set 'aaa accounting' to log all privileged use commands using 'commands 15'

높음레벨 1자동cisco-ios

설명

Runs accounting for all commands at the specified privilege level. Authentication, authorization and accounting (AAA) systems provide an authoritative source for managing and monitoring access for devices. Centralizing control improves consistency of access control, the services that may be accessed once authenticated and ... Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all' or 'show startup-config').

점검 방법

감사 방식: 구성 패턴

패턴: (?m)^aaa accounting commands 15 \S+ (?:start-stop|stop-only)\b

조치 방법

조치 방식: 가이드 또는 인프라 패치

! Configure AAA accounting for commands. aaa accounting commands 15 {default | list-name | guarantee-first} {start-stop | stop-only | none} {radius | group group-name}

속성

운영 체제: 모두
태그: cisco-iosnetworklogging
참고 자료: CIS Cisco IOS XE 17.x Benchmark v2.2.1 - 1.1.6 Set 'aaa accounting' to log all privileged use commands using 'commands 15'

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target cisco-ios