Cisco NX-OS
TMA-CISCO-NXOS-1.7.3
Set SSH Key Modulus Length
YüksekDüzey 2Manuel incelemecisco-nxos
Açıklama
SSH sessions are encrypted using a key unique to the host (in this case the NX-OS switch). It is recommended that this key be 2048 bytes long or longer. While attacking encryption algorithms is not practical for commodity malware, it definitely is possible. As remediation is so easily done it is definitely recommended. CIS assessment: Manual. Reported as SKIP with review instructions.
Nasıl denetlenir
Denetim yöntemi: Manuel inceleme
Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.
CIS assessment: Manual. switch# sho ssh key | i bitcount bitcount:1024 bitcount: 0
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
! Again, this must be implemented using an out-of-band (ie - not ssh) method. no feature ssh ssh key rsa 2048 force feature ssh
Özellikler
- İşletim sistemleri
- Herhangi biri
- Etiketler
- cisco-nxosnetworkmanagement-plane
- Referans
- CIS Cisco NX-OS Benchmark v1.2.0 - 1.7.3 Set SSH Key Modulus Length