TMAegisBeta
cisco-nxos için daha fazla kural

Cisco NX-OS

TMA-CISCO-NXOS-1.4.1

Enable Password Complexity Requirements for Local Credentials

YüksekDüzey 1Otomatikcisco-nxos

Açıklama

While configuring a back-end authentication store is the recommended configuration, at least one local administrative account must be configured. For this reason, ensuring a minimum bar for password strength for all local administrative accounts is important. While in ideal conditions local credentials won't be used, there are many scenarios (such as deployed on a purely public network or on an air gapped network) where this is the only option. Strength checking is on by default; fails if 'no password strength-check' is present. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all', which adds default values).

Nasıl denetlenir

Denetim yöntemi: Yapılandırma deseni

Desen
(?m)^no password strength-check\b

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

! A single command enables this: password strength-check

Özellikler

İşletim sistemleri
Herhangi biri
Etiketler
cisco-nxosnetworkaaa
Referans
CIS Cisco NX-OS Benchmark v1.2.0 - 1.4.1 Enable Password Complexity Requirements for Local Credentials

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell
tmaegis scan --target cisco-nxos