Rule explorer
Browse every hardening rule in the catalogue. Filter by platform, severity, profile level and whether the check can be automated.
53 rules foundof 8,597Page 1 of 3
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-CISCO-IOSXR-1.1.1.1 | TACACS+ (AAA server group)cisco-iosxr · Level 2 | cisco-iosxr | High | 2 | Automated |
| TMA-CISCO-IOSXR-1.1.1.2 | RADIUS (AAA server group)cisco-iosxr · Level 2 | cisco-iosxr | High | 2 | Automated |
| TMA-CISCO-IOSXR-1.1.2.1 | console authenticationcisco-iosxr · Level 1 | cisco-iosxr | High | 1 | Automated |
| TMA-CISCO-IOSXR-1.1.2.2 | vty line authenticationcisco-iosxr · Level 1 | cisco-iosxr | High | 1 | Automated |
| TMA-CISCO-IOSXR-1.2.3 | Set 'seconds' for 'ssh timeout' for 60 seconds or lesscisco-iosxr · Level 1 | cisco-iosxr | High | 1 | Automated |
| TMA-CISCO-IOSXR-1.5.1 | Unset 'private' for 'snmp-server community'cisco-iosxr · Level 1 | cisco-iosxr | High | 1 | Automated |
| TMA-CISCO-IOSXR-1.5.2 | Unset 'public' for 'snmp-server community'cisco-iosxr · Level 1 | cisco-iosxr | High | 1 | Automated |
| TMA-CISCO-IOSXR-1.5.3 | Do not set 'RW' for any 'snmp-server community'cisco-iosxr · Level 1 | cisco-iosxr | High | 1 | Automated |
| TMA-CISCO-IOSXR-1.5.4 | Set the ACL for each 'snmp-server community'cisco-iosxr · Level 1 | cisco-iosxr | High | 1 | Automated |
| TMA-CISCO-IOSXR-1.6.1 | Disable Telnet Accesscisco-iosxr · Level 1 | cisco-iosxr | High | 1 | Automated |
| TMA-CISCO-IOSXR-1.6.2 | Restrict VTY Accesscisco-iosxr · Level 1 | cisco-iosxr | High | 1 | Automated |
| TMA-CISCO-IOSXR-1.8.1 | Enable AES Password Encryptioncisco-iosxr · Level 2 | cisco-iosxr | High | 2 | Manual review |
| TMA-CISCO-IOSXR-1.8.2 | Set username secret for all local userscisco-iosxr · Level 1 | cisco-iosxr | High | 1 | Automated |
| TMA-CISCO-IOSXR-1.8.3 | Configure a Password Policycisco-iosxr · Level 2 | cisco-iosxr | High | 2 | Manual review |
| TMA-CISCO-IOSXR-2.1.1.1 | Authentication (EIGRP)cisco-iosxr · Level 2 | cisco-iosxr | High | 2 | Automated |
| TMA-CISCO-IOSXR-2.1.2.1 | Authentication (OSPF)cisco-iosxr · Level 2 | cisco-iosxr | High | 2 | Automated |
| TMA-CISCO-IOSXR-2.1.3.1 | Authentication (BGP)cisco-iosxr · Level 2 | cisco-iosxr | High | 2 | Manual review |
| TMA-CISCO-IOSXR-2.1.4.1 | Authentication (IS-IS)cisco-iosxr · Level 2 | cisco-iosxr | High | 2 | Automated |
| TMA-CISCO-IOSXR-2.1.5.1 | Authentication (RIPv2)cisco-iosxr · Level 2 | cisco-iosxr | High | 2 | Automated |
| TMA-CISCO-IOSXR-2.2.1.2 | Set 'ntp authentication-key'cisco-iosxr · Level 2 | cisco-iosxr | High | 2 | Automated |
| TMA-CISCO-IOSXR-2.3.1 | Authentication (VRRP)cisco-iosxr · Level 2 | cisco-iosxr | High | 2 | Automated |
| TMA-CISCO-IOSXR-2.4.1 | Authentication (HSRP)cisco-iosxr · Level 2 | cisco-iosxr | High | 2 | Automated |
| TMA-CISCO-IOSXR-1.1.3.1 | Configure Authorizationcisco-iosxr · Level 2 | cisco-iosxr | Medium | 2 | Automated |
| TMA-CISCO-IOSXR-1.1.4.1 | exec accountingcisco-iosxr · Level 1 | cisco-iosxr | Medium | 1 | Automated |
| TMA-CISCO-IOSXR-1.1.4.2 | command accountingcisco-iosxr · Level 1 | cisco-iosxr | Medium | 1 | Automated |