TMA-FORTISWITCH-1.6.1.2
Remove default admin user and create one with other name
Opis
Before deploying any new Fortinet, it is important to change the password of the default admin account. It is also recommended that you change even the user name of the default admin account. However, since you cannot change the user name of an account that is currently in use, a second administrator account must be created in order to do this. FAILs if the default 'admin' account still exists. Audited against FortiSwitchOS 'show full-configuration' output (standalone FortiSwitch, saved in full); patterns are scoped to the named 'config ... end' block, whose member lines are indented.
Kako se proverava
Metod provere: Obrazac konfiguracije
- Obrazac
(?m)^config system admin\n(?:[ \t]+[^\n]*\n)*?[ \t]+edit "admin"[ \t]*$
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
config system admin edit "mycompanyadmin" set accprofile "super_admin" set password <password> next end (log in as mycompanyadmin, then) config system admin delete "admin" end # CIS guidance: First create another local admin account, for example mycompanyadmin. config system admin edit "mycompanyadmin" set accprofile "tier_1" set password ...... set accprofile "super_admin" end Verify if the newly created login works by opening another CLI session, do not logout of your current session. Once validated, logout with the default local admin account and use the CLI session with mycompanyadmin to delete the default local admin account. Please make sure there are no references in the configuration to the account (groups, etc.) config system admin delete "admin" end To change the default password in the GUI: System > Admin > Administrators and click on "Edit" under the "admin" user. Create New admin account (mycompanyadmin): System > Admin > Administrators and clicking on "Add Administrator". Verify if you can login with that account via another browser session (eg. incognito mode). Remove default admin user: System > Admin > Administrators and selecting "admin" and clicking on the "Delete" button.
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- fortiswitchauthentication
- Referenca
- CIS FortiSwitch Benchmark v1.0.0 - 1.6.1.2 Remove default admin user and create one with other name
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
tmaegis scan --target fortiswitch