TMA-CISCO-IOS-1.4.2

Enable 'service password-encryption'

VisokaNivo 1Automatskacisco-ios

Opis

When password encryption is enabled, the encrypted form of the passwords is displayed when a more system:running-config command is entered. This requires passwords to be encrypted in the configuration file to prevent unauthorized users from learning the passwords just by reading the configuration. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all' or 'show startup-config').

Kako se proverava

Metod provere: Obrazac konfiguracije

Obrazac: (?m)^service password-encryption\s*$

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

! Enable password encryption service to protect sensitive access passwords in the device configuration. service password-encryption

Svojstva

Operativni sistemi: Bilo koji
Oznake: cisco-iosnetworkaaa
Referenca: CIS Cisco IOS XE 17.x Benchmark v2.2.1 - 1.4.2 Enable 'service password-encryption'

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target cisco-ios