Ensure ‘NTP authentication’ is enabled
Details Enables NTP authentication in order to receive time information only from trusted sources Rationale: When authentication is not enabled,...
- Home
- Security Hardening
- CIS Cisco Firewall ASA 9 L1 V4 1.0
CIS Cisco Firewall ASA 9 L1 V4 1.0
Ensure ‘NTP authentication key’ is configured correctly
Details Sets the key used to authenticate NTP servers Rationale: When authentication is not enabled, attackers can disguise as NTP...Ensure ‘Password Policy’ is enabled – lifetime
Details Enforces the Enterprise Password Policy by setting compliant local password requirements for the security appliance Rationale: The password policy...Ensure ‘Password Policy’ is enabled – minimum-changes
Details Enforces the Enterprise Password Policy by setting compliant local password requirements for the security appliance Rationale: The password policy...Ensure ‘Password Policy’ is enabled – minimum-length
Details Enforces the Enterprise Password Policy by setting compliant local password requirements for the security appliance Rationale: The password policy...Ensure ‘Password Policy’ is enabled – minimum-lowercase
Details Enforces the Enterprise Password Policy by setting compliant local password requirements for the security appliance Rationale: The password policy...Ensure ‘Password Policy’ is enabled – minimum-numeric
Details Enforces the Enterprise Password Policy by setting compliant local password requirements for the security appliance Rationale: The password policy...Ensure ‘Password Policy’ is enabled – minimum-special
Details Enforces the Enterprise Password Policy by setting compliant local password requirements for the security appliance Rationale: The password policy...Ensure ‘Password Policy’ is enabled – minimum-uppercase
Details Enforces the Enterprise Password Policy by setting compliant local password requirements for the security appliance Rationale: The password policy...Ensure ‘Password Recovery’ is disabled
Details Disables the password recovery Rationale: Disabling the password recovery is an additional physical control. It will prevent an attacker...