TMAegis베타
cisco-ios 관련 규칙 더 보기

Cisco IOS

TMA-CISCO-IOS-1.4.1

Set 'password' for 'enable secret'

높음레벨 1자동cisco-ios

설명

Use the enable secret command to provide an additional layer of security over the enable password. The enable secret command provides better security by storing the enable secret password using a nonreversible cryptographic function. The added layer of security encryption provides is useful in environments where the password crosses the network or is stored on a TFTP server. In Cisco IOS XE, password types 8 and 9 are considered more secure than older password types because they use strong hashing algorithms. - Type 8 passwords use PBKDF2 with SHA-256, which is an improvement over older MD5-based hashing methods. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all' or 'show startup-config').

점검 방법

감사 방식: 구성 패턴

패턴
(?m)^enable secret \S

조치 방법

조치 방식: 가이드 또는 인프라 패치

! Configure a strong, enable secret password. enable secret 9 {ENABLE_SECRET_PASSWORD}

속성

운영 체제
모두
태그
cisco-iosnetworkaaa
참고 자료
CIS Cisco IOS XE 17.x Benchmark v2.2.1 - 1.4.1 Set 'password' for 'enable secret'

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell
tmaegis scan --target cisco-ios