Set SSH Key Modulus Length

VisokaNivo 2Ručni pregledcisco-nxos

Opis

SSH sessions are encrypted using a key unique to the host (in this case the NX-OS switch). It is recommended that this key be 2048 bytes long or longer. While attacking encryption algorithms is not practical for commodity malware, it definitely is possible. As remediation is so easily done it is definitely recommended. CIS assessment: Manual. Reported as SKIP with review instructions.

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

CIS assessment: Manual. switch# sho ssh key | i bitcount bitcount:1024 bitcount: 0

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

! Again, this must be implemented using an out-of-band (ie - not ssh) method. no feature ssh ssh key rsa 2048 force feature ssh

Svojstva

Operativni sistemi: Bilo koji
Oznake: cisco-nxosnetworkmanagement-plane
Referenca: CIS Cisco NX-OS Benchmark v1.2.0 - 1.7.3 Set SSH Key Modulus Length