Ensure ‘aaa local authentication max failed attempts’ is set to your organization’s poicy
Details Limits the maximum number of times a local user can enter a wrong password before being locked out Rationale:...
- Home
- Security Hardening
- Tenable Cisco Firepower Threat Defense Best Practices
Tenable Cisco Firepower Threat Defense Best Practices
Ensure ‘console session timeout’ is set to organizational policy
Details Sets the idle timeout for a console session before the security appliance terminates it. Rationale: Limiting session timeout prevents...Ensure DHCP services are disabled for untrusted interfaces – dhcpd
Details Disables the DHCP service Rationale: The Firepower can act as a DHCP or DHCP Relay server. However, on untrusted...Ensure DHCP services are disabled for untrusted interfaces – dhcprelay
Details Disables the DHCP service Rationale: The Firepower can act as a DHCP or DHCP Relay server. However, on untrusted...Ensure DNS services are configured correctly – domain-lookup
Details Sets DNS server(s) to be used by the appliance to perform DNS queries Rationale: The security appliance may perform...Ensure DNS services are configured correctly – name-server
Details Sets DNS server(s) to be used by the appliance to perform DNS queries Rationale: The security appliance may perform...Ensure ‘EIGRP authentication’ is enabled
Details Enables the authentication of EIGRP neighbor before routing information is received from the neighbor Rationale: Enabling the routing protocol...Ensure email logging is configured for critical to emergency
Details Enables logs to be sent to an email recipient for critical to emergency logs’ severity s Rationale: In some...Ensure email logging is enabled
Details Enables logs to be sent to an email recipient for critical to emergency logs’ severity s Rationale: In some...Ensure ‘Failover’ is enabled
Details Enables failover between the security appliance and another security appliance in order to achieve high availability Rationale: Enabling failover...