Cisco NX-OS
TMA-CISCO-NXOS-1.4.1
Enable Password Complexity Requirements for Local Credentials
Açıklama
While configuring a back-end authentication store is the recommended configuration, at least one local administrative account must be configured. For this reason, ensuring a minimum bar for password strength for all local administrative accounts is important. While in ideal conditions local credentials won't be used, there are many scenarios (such as deployed on a purely public network or on an air gapped network) where this is the only option. Strength checking is on by default; fails if 'no password strength-check' is present. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).
Nasıl denetlenir
Denetim yöntemi: Yapılandırma deseni
- Desen
(?m)^no password strength-check\b
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
! A single command enables this: password strength-check
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- cisco-nxosnetworkaaa
- Referans
- CIS Cisco NX-OS Benchmark v1.2.0 - 1.4.1 Enable Password Complexity Requirements for Local Credentials
Bu ana makineyi denetle
Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.
tmaegis scan --target cisco-nxos