Ensure 'Image Integrity' is correct

СреднийУровень 1Ручная проверкаcisco-asa

Описание

Verifies integrity of an uploaded software before upgrading the system. While software is downloaded from the internet it can be corrupted, as a result, the image integrity should be verified before upgrading the system with the downloaded software. CIS assessment: Manual. Reported as SKIP with review instructions.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

CIS assessment: Manual. - Step 1: Acquire the location in the security appliance of the new image <new_image_location> and the MD5 checksum <md5_checksum> from the Cisco.com Website - Step 2: Run the following command to verify that the MD5 checksum value of the new image matches the one provided on the Cisco.com Website hostname#verify <new_image_location> <md5_checksum> Example: Asa-fw# verify disk0:asa9xx-6-k8.bin 76b5448039e642099334abbfec5a8705 Verifying file integrity of disk0:/asa9xx-6-k8.bin!!!!!!!!!!!!!!!!!! ...

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Download a new image from the Cisco.com website and apply the audit procedure until obtaining the message 'Verified' at the end of the output.

Свойства

Операционные системы: Любая
Теги: cisco-asanetworkhardening
Источник: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.3.1 Ensure 'Image Integrity' is correct