Ensure at/cron is restricted to authorized users – cron.allow
Details On many systems, only the system administrator is authorized to schedule cron jobs. Using the cron.allow file to control...
- Home
- Security Hardening
- Tenable Cisco Firepower Management Center OS Best Practices
Tenable Cisco Firepower Management Center OS Best Practices
Ensure at/cron is restricted to authorized users – cron.deny
Details On many systems, only the system administrator is authorized to schedule cron jobs. Using the cron.allow file to control...Ensure audit logs are not automatically deleted
Details In high security contexts, the benefits of maintaining a long audit history exceed the cost of storing the audit...Ensure audit log storage size is configured
Details It is important that an appropriate size is determined for log files so that they do not impact the...Ensure authentication required for single user mode
Details Requiring authentication in single user mode prevents an unauthorized user from rebooting the system into single user to gain...Ensure Avahi Server is not enabled
Details Avahi is a free zeroconf implementation, including a system for multicast DNS/DNS-SD service discovery. Avahi allows programs to publish...Ensure bogus ICMP responses are ignored – /etc/sysctl
Details Setting icmp_ignore_bogus_error_responses to 1 prevents the kernel from logging bogus responses (RFC-1122 non-compliant) from broadcast reframes, keeping file systems...Ensure bogus ICMP responses are ignored – sysctl
Details Setting icmp_ignore_bogus_error_responses to 1 prevents the kernel from logging bogus responses (RFC-1122 non-compliant) from broadcast reframes, keeping file systems...Ensure broadcast ICMP requests are ignored – /etc/sysctl
Details Setting net.ipv4.icmp_echo_ignore_broadcasts to 1 will cause the system to ignore all ICMP echo and timestamp requests to broadcast and...Ensure broadcast ICMP requests are ignored – sysctl
Details Setting net.ipv4.icmp_echo_ignore_broadcasts to 1 will cause the system to ignore all ICMP echo and timestamp requests to broadcast and...