Set 'http Secure-server' limit

YüksekDüzey 1Otomatikcisco-ios

Açıklama

Device management includes the ability to control the number of administrators and management sessions that manage a device. Limiting the number of allowed administrators and sessions per administrator based on account type, role, or access type is helpful in limiting risks related to denial-of-service (DoS) attacks. This requirement addresses concurrent sessions for administrative accounts and does not address concurrent sessions by a single administrator via multiple administrative accounts. Fails when 'ip http secure-server' is enabled without an 'ip http max-connections' limit. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all' or 'show startup-config').

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen: (?m)\A(?:[ \t]*(?:$|[^i \t\n]|i(?:$|[^p\n]|p(?:$|[^ \n]| (?:$|[^h\n]|h(?:$|[^t\n]|t(?:$|[^t\n]|t(?:$|[^p\n]|p(?:$|[^ \n]| (?:$|[^m\n]|m(?:$|[^a\n]|a(?:$|[^x\n]|x(?:$|[^\-\n]|-(?:$|[^c\n]|c(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^n\n]|n(?:$|[^e\n]|e(?:$|[^c\n]|c(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^s\n]|s(?:$|[^ \n]))))))))))))))))))))))))[^\n]*\n)*[ \t]*ip http secure-server[^\n]*(?:\n(?:[ \t]*(?:$|[^i \t\n]|i(?:$|[^p\n]|p(?:$|[^ \n]| (?:$|[^h\n]|h(?:$|[^t\n]|t(?:$|[^t\n]|t(?:$|[^p\n]|p(?:$|[^ \n]| (?:$|[^m\n]|m(?:$|[^a\n]|a(?:$|[^x\n]|x(?:$|[^\-\n]|-(?:$|[^c\n]|c(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^n\n]|n(?:$|[^e\n]|e(?:$|[^c\n]|c(?:$|[^t\n]|t(?:$|[^i\n]|i(?:$|[^o\n]|o(?:$|[^n\n]|n(?:$|[^s\n]|s(?:$|[^ \n]))))))))))))))))))))))))[^\n]*))*\n?\z

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

ip http max-connections 2

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: cisco-iosnetworkmanagement-plane
Referans: CIS Cisco IOS XE 17.x Benchmark v2.2.1 - 1.2.9 Set 'http Secure-server' limit

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target cisco-ios