Cisco NX-OS
TMA-CISCO-NXOS-1.2.6
Set the Maximum Number of VTY Sessions
Opis
This sets the maximum number of remote administrative sessions, which in most environments means the maximum number of SSH sessions. This setting prevents an attacker from a resource-exhaustion attack using protocol such as SSH. If there is no limit, an attacker could simply create SSH sessions and leave them in place until the NX-OS host resources (memory) would be exhausted. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).
Kako se proverava
Metod provere: Obrazac konfiguracije
- Obrazac
(?m)^line vty[^\n]*\n(?:[ \t][^\n]*\n)*?[ \t]+session-limit \d+
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
line vty session-limit 16
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- cisco-nxosnetworkmanagement-plane
- Referenca
- CIS Cisco NX-OS Benchmark v1.2.0 - 1.2.6 Set the Maximum Number of VTY Sessions
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
tmaegis scan --target cisco-nxos