2.1.5 Set 'no ip identd'

Information

Disable the identification (identd) server.

Identification protocol enables identifying a user's transmission control protocol (TCP) session. This information disclosure could potentially provide an attacker with information about users.

Solution

Disable the ident server.

hostname(config)#no ip identd

Impact:

To reduce the risk of unauthorized access, organizations should implement a security policy restricting network protocols and explicitly require disabling all insecure or unnecessary protocols such as the identification protocol (identd).

See Also

https://workbench.cisecurity.org/benchmarks/17130

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv7|9.2

Plugin: Cisco

Control ID: 3619c1c5d661647a059ab5fc7884843c0b1b83b458a19f421330258bde844757