Detections
Analytics

CIS Cisco ASA 9.x Firewall L2 v1.0.0

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS Cisco ASA 9.x Firewall L2 v1.0.0

Updated: 6/17/2024

Authority: CIS

Plugin: Cisco

Revision: 1.7

Estimated Item Count: 15

File Details

Filename: CIS_Cisco_ASA_9.x_Firewall_v1.0.0_L2.audit

Size: 28.6 kB

MD5: 530f748c883957ee5f97d81cdedc0c7b
SHA256: feedb7d4fc73ceb328e014a418cc24946d5ddf41a3d372add21a3839e2da0d3f

Audit Items

DescriptionCategories
1.4.2.1 Ensure 'TACACS+/RADIUS' is configured correctly - host
1.4.2.1 Ensure 'TACACS+/RADIUS' is configured correctly - protocol
1.6.3 Ensure 'RSA key pair' is greater than or equal to 2048 bits
1.6.4 Ensure 'SCP protocol' is set to Enable for files transfers
1.7.1 Ensure 'HTTP source restriction' is set to an authorized IP address
2.1.1 Ensure 'RIP authentication' is enabled
2.1.2 Ensure 'OSPF authentication' is enabled
2.1.3 Ensure 'EIGRP authentication' is enabled
2.1.4 Ensure 'BGP authentication' is enabled
2.2 Ensure 'noproxyarp' is enabled for untrusted interfaces
2.3 Ensure 'DNS Guard' is enabled
3.9 Ensure Botnet protection is enabled for untrusted interfaces
3.10 Ensure ActiveX filtering is enabled
3.11 Ensure Java applet filtering is enabled
CIS_Cisco_ASA_9.x_Firewall_v1.0.0_L2.audit from CIS Cisco ASA 9.x Firewall Benchmark v1.0.0