Detections
Analytics

CIS Cisco ASA 9.x Firewall L1 v1.0.0

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS Cisco ASA 9.x Firewall L1 v1.0.0

Updated: 6/17/2024

Authority: CIS

Plugin: Cisco

Revision: 1.8

Estimated Item Count: 77

File Details

Filename: CIS_Cisco_ASA_9.x_Firewall_v1.0.0_L1.audit

Size: 108 kB

MD5: 71e5784362a2d476fa0af1628c20af4d
SHA256: 00e02f27908d34978a772c826687b98681e7acd9f578056d76bd487d949cd19a

Audit Changelog

 
Revision 1.8

Jun 17, 2024

Miscellaneous
  • Audit deprecated.
  • Metadata updated.
  • References updated.
Revision 1.7

Oct 12, 2023

Functional Update
  • 1.10.10 Ensure 'logging trap severity level' is greater than or equal to '5'
  • 1.2.4 Ensure 'Unused Interfaces' is disable
  • 1.3.2 Ensure 'Image Authenticity' is correct
  • 1.4.3.1 Ensure 'aaa authentication enable console' is configured correctly
  • 1.4.3.2 Ensure 'aaa authentication http console' is configured correctly
  • 1.4.3.4 Ensure 'aaa authentication serial console' is configured correctly
  • 1.4.3.5 Ensure 'aaa authentication ssh console' is configured correctly
  • 1.4.4.1 Ensure 'aaa command authorization' is configured correctly
  • 1.4.4.2 Ensure 'aaa authorization exec' is configured correctly
  • 1.4.5.1 Ensure 'aaa accounting command' is configured correctly
  • 1.4.5.2 Ensure 'aaa accounting for SSH' is configured correctly
  • 1.4.5.3 Ensure 'aaa accounting for Serial console' is configured correctly
  • 1.4.5.4 Ensure 'aaa accounting for EXEC mode' is configured correctly
  • 1.6.1 Ensure 'SSH source restriction' is set to an authorized IP address
  • 1.7.3 Ensure 'SSL AES 256 encryption' is set for HTTPS access
  • 1.9.1.2 Ensure 'NTP authentication key' is configured correctly
Informational Update
  • 1.2.4 Ensure 'Unused Interfaces' is disable
Miscellaneous
  • Metadata updated.
  • Variables updated.
Added
  • 1.11.4 Ensure 'SNMP traps' is enabled
Removed
  • 1.11.4 Ensure 'SNMP traps' is enabled - authentication
  • 1.11.4 Ensure 'SNMP traps' is enabled - coldstart
  • 1.11.4 Ensure 'SNMP traps' is enabled - linkdown
  • 1.11.4 Ensure 'SNMP traps' is enabled - linkup
Revision 1.6

Mar 7, 2023

Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.5

Jan 4, 2023

Miscellaneous
  • Metadata updated.
  • Variables updated.
Revision 1.4

Dec 7, 2022

Miscellaneous
  • Metadata updated.
Revision 1.3

Apr 25, 2022

Miscellaneous
  • Metadata updated.
Revision 1.2

Mar 29, 2022

Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.1

Nov 29, 2021

Functional Update
  • 1.5.1 Ensure 'ASDM banner' is set
Miscellaneous
  • References updated.