Details

Use the enable secret command to provide an additional layer of security over the enable password. The enable secret command provides better security by storing the enable secret password using a nonreversible cryptographic function. The added layer of security encryption provides is useful in environments where the password crosses the network or is stored on a TFTP server.

Solution

Configure a strong, enable secret password.
hostname(config)#enable secret

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/508

This security hardening control applies to the following category of controls within NIST 800-53: Identification and Authentication.This control applies to the following type of system Cisco.

References

• 800-53|IA-5(1)(c)

Source

• Tenable.com/audits