Cisco ASA
TMA-CISCO-ASA-1.4.3.1
Ensure 'aaa authentication enable console' is configured correctly
Opis
Authenticates users trying to access the Enable mode (privileged EXEC mode) through the 'enable' command. The default access to enable mode is done through a password. AAA provides a primary method for authenticating users (a username/password database stored on a TACACS+ or RADIUS server or group of servers) and then specifies backup method (a locally stored ... Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).
Kako se proverava
Metod provere: Obrazac konfiguracije
- Obrazac
(?m)^aaa authentication enable console \S
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
! Configure the aaa authentication for enable access using the TACACS+ server-group as primary method and the local database as backup method aaa authentication enable console <server-group_name> local
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- cisco-asanetworkaaa
- Referenca
- CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.4.3.1 Ensure 'aaa authentication enable console' is configured correctly
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
tmaegis scan --target cisco-asa