1.4.1.2 Ensure 'local username and password' is set

Information

Sets a local username and password

Rationale:

Default device configuration does not require strong user authentication enabling unfettered access to an attacker that can reach the device. Creating a local account with a strong password enforces login authentication and provides a fallback authentication mechanism in case remote centralized authentication, authorization and accounting services are unavailable

Solution

Run the following to set a local username and password.

hostname(config)#username <local_username> password <local_password> privilege <level>

The privilege level is chosen between 0 and 15. If the privilege is not configured, the default one is 2.

Default Value:

The default username used for the first SSH connection or aaa authentication telnet console is asa but for versions from 8.4(2) and above, there is no default username

See Also

https://workbench.cisecurity.org/files/3246

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CSCv7|4.4

Plugin: Cisco

Control ID: d45c25a0d5030632564be013ddcde710cfd38843a76a4b15fe8bd63b9ce20879