TMA-CISCO-ASA-1.4.3.1

Ensure 'aaa authentication enable console' is configured correctly

YüksekDüzey 1Otomatikcisco-asa

Açıklama

Authenticates users trying to access the Enable mode (privileged EXEC mode) through the 'enable' command. The default access to enable mode is done through a password. AAA provides a primary method for authenticating users (a username/password database stored on a TACACS+ or RADIUS server or group of servers) and then specifies backup method (a locally stored ... Audited against the output of 'show running-config' (run 'terminal pager 0' first; 'more system:running-config' also works and shows unmasked secrets).

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen: (?m)^aaa authentication enable console \S

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

! Configure the aaa authentication for enable access using the TACACS+ server-group as primary method and the local database as backup method aaa authentication enable console <server-group_name> local

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: cisco-asanetworkaaa
Referans: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.4.3.1 Ensure 'aaa authentication enable console' is configured correctly

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target cisco-asa