Configure Alerts on all Configuration Changes

СреднийУровень 2Ручная проверкаcisco-nxos

Описание

This is not easily implemented directly on the switch. Changes should ideally be backed up remotely, and a "diff" process to highlight any changes in successive configurations is a good process to implement. Change Control processes are ubiquitous in the industry. Especially with a text-based configuration such as most network devices have, it is easy to extract the exact changes from one version of the saved or running configuration to the next. CIS assessment: Manual. Reported as SKIP with review instructions.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

CIS assessment: Manual. This should be an automated process running on the host that is the repository for daily backups. An assessment should be made on that host.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

This is not a process that typically runs on the switch, there is no on-switch remediation.

Свойства

Операционные системы: Любая
Теги: cisco-nxosnetworkhardening
Источник: CIS Cisco NX-OS Benchmark v1.2.0 - 4.3 Configure Alerts on all Configuration Changes