Ensure 'Image Authenticity' is correct

Trung bìnhCấp 1Xem xét thủ côngcisco-asa

Mô tả

Verifies for digitally signed images that the running image is from a trusted source. The software image being a code can be vulnerable to many attacks such as malicious code injection in the software, the modification of the code installed in the ROM. Not reliably checkable from an exported configuration. Reported as SKIP with review instructions.

Cách kiểm tra

Phương pháp kiểm tra: Xem xét thủ công

Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.

Not reliably checkable from an exported configuration. - Step 1: Run the following command to verify the authenticity of the image currently running on the security appliance hostname#show software authenticity running | in CiscoSystems$ Example: Asa-fw# show software authenticity running Image type : Release Signer Information Common Name : abraxas Organization Unit : ASAv Organization Name : CiscoSystems Certificate Serial Number : 565963AF Hash Algorithm : SHA2 512 Signature Algorithm : 2048-bit RSA Key Version : A Asa-fw# show software authenticity running | in CiscoSystems$ ...

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

! - Step 1: Correct the errors on the hardware and software - Step 2: Run the audit procedure until the system is compliant - Step 3: Implement secure delivery of hardware and harden the software distribution server

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: cisco-asanetworkhardening
Tham chiếu: CIS Cisco ASA 9.x Firewall Benchmark v1.1.0 - 1.3.2 Ensure 'Image Authenticity' is correct