Cisco ASA
TMA-CISCO-ASA-1.4.1.3
Ensure known default accounts do not exist
Opis
Deletes the known default accounts configured. In order to attempt access to known devices' platforms, attackers use the available database of the known default accounts for each platform or Operating System. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).
Kako se proverava
Metod provere: Obrazac konfiguracije
- Obrazac
(?m)(?i)^username (?:admin|asa|cisco|pix|root)\s
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
! - Step 1: Acquire the Enterprise customized administrative account <customized_admin_account> and password <admin_password> - Step 2: Run the following to create the customized administrative account as well as the required privilege level <privilege_level> username <customized_admin_account> password <admin_password> privilege <privilege_level> - Step 3: Run the following to delete the known default accounts identified during the audit no username <known_default_account>
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- cisco-asanetworkaaa
- Referenca
- CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.4.1.3 Ensure known default accounts do not exist
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
tmaegis scan --target cisco-asa