Ensure 'aaa accounting command' is configured correctly

VisokaNivo 1Automatskacisco-asa

Opis

Enables accounting of administrative access by specifying that each command, or commands of a specified privilege level or higher, entered by an administrator/user is recorded and sent to the accounting server or servers. The AAA accounting feature enables to track the actions performed by users and to store the data collected into AAA serves for further audit or further analysis. Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: (?m)^aaa accounting command (?:privilege \d+ )?\S

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

! Run the following in order to record all the commands entered at all the privilege levels and to send them to the AAA servers aaa accounting command <server-group_name>

Svojstva

Operativni sistemi: Bilo koji
Oznake: cisco-asanetworklogging
Referenca: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.4.5.1 Ensure 'aaa accounting command' is configured correctly

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target cisco-asa