Configure Alerts on all Configuration Changes

보통레벨 2수동 검토cisco-nxos

설명

This is not easily implemented directly on the switch. Changes should ideally be backed up remotely, and a "diff" process to highlight any changes in successive configurations is a good process to implement. Change Control processes are ubiquitous in the industry. Especially with a text-based configuration such as most network devices have, it is easy to extract the exact changes from one version of the saved or running configuration to the next. CIS assessment: Manual. Reported as SKIP with review instructions.

점검 방법

감사 방식: 수동 검토

이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.

CIS assessment: Manual. This should be an automated process running on the host that is the repository for daily backups. An assessment should be made on that host.

조치 방법

조치 방식: 가이드 또는 인프라 패치

This is not a process that typically runs on the switch, there is no on-switch remediation.

속성

운영 체제: 모두
태그: cisco-nxosnetworkhardening
참고 자료: CIS Cisco NX-OS Benchmark v1.2.0 - 4.3 Configure Alerts on all Configuration Changes