Ensure ‘NTP authentication’ is enabled
Details Enables NTP authentication in order to receive time information only from trusted sources Rationale: When authentication is not enabled,...
- Home
- Security Hardening
- CIS Cisco Firewall V8.x L1 V4 2.0
CIS Cisco Firewall V8.x L1 V4 2.0
Ensure ‘Password Policy’ is enabled – lifetime
Details Enforces the Enterprise Password Policy by setting compliant local password requirements for the security appliance Rationale: The password policy...Ensure ‘Password Policy’ is enabled – minimum-changes
Details Enforces the Enterprise Password Policy by setting compliant local password requirements for the security appliance Rationale: The password policy...Ensure ‘Password Policy’ is enabled – minimum-length
Details Enforces the Enterprise Password Policy by setting compliant local password requirements for the security appliance Rationale: The password policy...Ensure ‘Password Policy’ is enabled – minimum-lowercase
Details Enforces the Enterprise Password Policy by setting compliant local password requirements for the security appliance Rationale: The password policy...Ensure ‘Password Policy’ is enabled – minimum-numeric
Details Enforces the Enterprise Password Policy by setting compliant local password requirements for the security appliance Rationale: The password policy...Ensure ‘Password Policy’ is enabled – minimum-special
Details Enforces the Enterprise Password Policy by setting compliant local password requirements for the security appliance Rationale: The password policy...Ensure ‘Password Policy’ is enabled – minimum-uppercase
Details Enforces the Enterprise Password Policy by setting compliant local password requirements for the security appliance Rationale: The password policy...Ensure ‘Password Recovery’ is disabled
Details Disables the password recovery Rationale: Disabling the password recovery is an additional physical control. It will prevent an attacker...Ensure ‘RSA key pair’ is greater than or equal to 2048 bits
Details Generates an RSA key pair used by SSH protocol of at least 2048 bits Rationale: Secure Shell (SSH) is...