Configure Alerts on all Configuration Changes

OrtaDüzey 2Manuel incelemecisco-nxos

Açıklama

This is not easily implemented directly on the switch. Changes should ideally be backed up remotely, and a "diff" process to highlight any changes in successive configurations is a good process to implement. Change Control processes are ubiquitous in the industry. Especially with a text-based configuration such as most network devices have, it is easy to extract the exact changes from one version of the saved or running configuration to the next. CIS assessment: Manual. Reported as SKIP with review instructions.

Nasıl denetlenir

Denetim yöntemi: Manuel inceleme

Bu öneri otomatik olarak denetlenemez. --include-manual parametresini verdiğinizde tarama bunu bu talimatlarla birlikte listeler.

CIS assessment: Manual. This should be an automated process running on the host that is the repository for daily backups. An assessment should be made on that host.

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

This is not a process that typically runs on the switch, there is no on-switch remediation.

Özellikler

İşletim sistemleri: Herhangi biri
Etiketler: cisco-nxosnetworkhardening
Referans: CIS Cisco NX-OS Benchmark v1.2.0 - 4.3 Configure Alerts on all Configuration Changes