Extreme : License Info
Details Review the license information for the device, and make sure no licenses have expired. This security hardening control applies...
- Home
- Security Hardening
- TNS ExtremeXOS Best Practice
TNS ExtremeXOS Best Practice
Extreme : Only allow SNMPv3
Details Only allow SNMPv3 access. Solution To only allow SNMPv3, run the following command :n disable snmp access snmp-v1v2c This...Extreme : Password Policy – char-validation
Details Enable char-validation for passwords on all accounts Solution Run the following command to enforce password char-validation :n configure account...Extreme : Password Policy – history <=4
Details Do not allow password history of more than 4 Solution Runt the following command to enforce password history n...Extreme : Password Policy – lockout-on-login-failures
Details Lockout accounts after three consecutive login failures Solution Run the following command to enforce lockout-on-login-failures :n configure account user...Extreme : Password Policy – max-age <= 90
Details Do not allow password age more than 90 days Solution Run the following command to enforce max password age...Extreme : Review admin accounts
Details Review the list of admin accounts, and make sure no unauthorized users are on the list. Solution Disable all...Extreme : Review all accounts
Details Review the list of all accounts, and make sure no unauthorized users are on the list. Solution Disable all...Extreme : SNMP community name != private
Details Make sure ‘private’ community string does not exist Solution To remote private community string, run the following command :n...Extreme : SNMP community name != public
Details Make sure ‘public’ community string does not exist Solution To remote private community string, run the following command :n...