Tenable Cisco Viptela SD-WAN - vSmart

Audit Details

Name: Tenable Cisco Viptela SD-WAN - vSmart

Updated: 6/17/2024

Authority: TNS

Plugin: Cisco_Viptela

Revision: 1.4

Estimated Item Count: 24

File Details

Filename: Tenable_Best_Practices_Cisco_Viptela_vSmart_v1.0.0.audit

Size: 36 kB

MD5: eb4be38f249e06c15e1baf93f5fdd436
SHA256: 88a785ca28489dc0f6a415a2e1044988f8e3e741fc4e432d70f55debbdfa196c

Audit Items

DescriptionCategories
Account Management - Review account groups assigned to 'netadmin'

ACCESS CONTROL

Account Management - Review disabled user accounts

ACCESS CONTROL

Configure Control Plane Security Parameters

SYSTEM AND COMMUNICATIONS PROTECTION

Content of Audit Records - Configure disk logging - enable

AUDIT AND ACCOUNTABILITY

Content of Audit Records - Configure disk logging - file rotate

AUDIT AND ACCOUNTABILITY

Content of Audit Records - Configure disk logging - file size

AUDIT AND ACCOUNTABILITY

Content of Audit Records - Configure disk logging - priority level

AUDIT AND ACCOUNTABILITY

Content of Audit Records - Configure remote syslog - priority level

AUDIT AND ACCOUNTABILITY

Event Logging - Configure remote syslog - server

AUDIT AND ACCOUNTABILITY

Flaw Remediation - Review version of running image

SYSTEM AND INFORMATION INTEGRITY

Identification and Authentication - Use out of band authentication - AAA - audit logging

IDENTIFICATION AND AUTHENTICATION

Identification and Authentication - Use out of band authentication - AAA - netconf logging

IDENTIFICATION AND AUTHENTICATION

Identification and Authentication - Use out of band authentication - Admin Authentication Order

IDENTIFICATION AND AUTHENTICATION

Identification and Authentication - Use out of band authentication - Authentication Order

IDENTIFICATION AND AUTHENTICATION

Identification and Authentication - Use out of band authentication - Server IP

IDENTIFICATION AND AUTHENTICATION

Secure Name/address Resolution Service - Configure DNS servers - Primary

SYSTEM AND COMMUNICATIONS PROTECTION

Secure Name/address Resolution Service - Configure DNS servers - Secondary

SYSTEM AND COMMUNICATIONS PROTECTION

Session Termination - Configure Idle CLI timeout

ACCESS CONTROL

System Backup - Enable Backups - interval

CONTINGENCY PLANNING

System Backup - Enable Backups - path

CONTINGENCY PLANNING

System Use Notification - Banner Login

ACCESS CONTROL

System Use Notification - Banner motd

ACCESS CONTROL

Time Stamps - Enable NTP - remote server

AUDIT AND ACCOUNTABILITY

Time Stamps - Enable NTP - timezone

AUDIT AND ACCOUNTABILITY