Rule explorer
Browse every hardening rule in the catalogue. Filter by platform, severity, profile level and whether the check can be automated.
65 rules foundof 8,597Page 1 of 3
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-CISCO-NXOS-1.1.1.1 | Configure AAA Authentication - TACACS if applicablecisco-nxos · Level 1 | cisco-nxos | High | 1 | Automated |
| TMA-CISCO-NXOS-1.1.1.2 | Configure AAA Authentication - Local SSH keyscisco-nxos · Level 1 | cisco-nxos | High | 1 | Manual review |
| TMA-CISCO-NXOS-1.1.1.3 | Configure AAA Authentication - RADIUS if applicablecisco-nxos · Level 1 | cisco-nxos | High | 1 | Automated |
| TMA-CISCO-NXOS-1.1.2.1 | vty line authenticationcisco-nxos · Level 1 | cisco-nxos | High | 1 | Automated |
| TMA-CISCO-NXOS-1.2.1 | Restrict Access to VTY Sessionscisco-nxos · Level 1 | cisco-nxos | High | 1 | Automated |
| TMA-CISCO-NXOS-1.2.3 | Limit SSH Login Attempts to 3 or lesscisco-nxos · Level 1 | cisco-nxos | High | 1 | Automated |
| TMA-CISCO-NXOS-1.2.5 | Ensure Exec Timeout for Remote Administrative Sessions (VTY) is set to less than 10cisco-nxos · Level 1 | cisco-nxos | High | 1 | Automated |
| TMA-CISCO-NXOS-1.2.6 | Set the Maximum Number of VTY Sessionscisco-nxos · Level 1 | cisco-nxos | High | 1 | Automated |
| TMA-CISCO-NXOS-1.2.7 | Disable the Telnet Featurecisco-nxos · Level 1 | cisco-nxos | High | 1 | Automated |
| TMA-CISCO-NXOS-1.4.1 | Enable Password Complexity Requirements for Local Credentialscisco-nxos · Level 1 | cisco-nxos | High | 1 | Automated |
| TMA-CISCO-NXOS-1.4.2 | Configure Password Encryptioncisco-nxos · Level 2 | cisco-nxos | High | 2 | Automated |
| TMA-CISCO-NXOS-1.4.3 | Set password lifetime, warning time and grace time for local credentialscisco-nxos · Level 1 | cisco-nxos | High | 1 | Automated |
| TMA-CISCO-NXOS-1.4.4 | Set password length for local credentialscisco-nxos · Level 1 | cisco-nxos | High | 1 | Automated |
| TMA-CISCO-NXOS-1.5.2 | Log all Successful and Failed Administrative Loginscisco-nxos · Level 2 | cisco-nxos | High | 2 | Automated |
| TMA-CISCO-NXOS-1.6.4 | Configure NTP Authenticationcisco-nxos · Level 2 | cisco-nxos | High | 2 | Automated |
| TMA-CISCO-NXOS-1.7.3 | Set SSH Key Modulus Lengthcisco-nxos · Level 2 | cisco-nxos | High | 2 | Manual review |
| TMA-CISCO-NXOS-1.9.4 | Ensure Read Write privileges are not configured for SNMPcisco-nxos · Level 1 | cisco-nxos | High | 1 | Automated |
| TMA-CISCO-NXOS-1.10 | Use Dedicated "mgmt" Interface and VRF for Administrative Functionscisco-nxos · Level 2 | cisco-nxos | High | 2 | Manual review |
| TMA-CISCO-NXOS-3.1.1.1 | Configure EIGRP Authentication on all EIGRP Routing Devicescisco-nxos · Level 2 | cisco-nxos | High | 2 | Manual review |
| TMA-CISCO-NXOS-3.1.2.3 | Configure BGP Authenticationcisco-nxos · Level 2 | cisco-nxos | High | 2 | Manual review |
| TMA-CISCO-NXOS-3.1.3.2 | Authenticate OSPF peers with MD5 authentication keyscisco-nxos · Level 2 | cisco-nxos | High | 2 | Manual review |
| TMA-CISCO-NXOS-SNMP-NO-DEFAULT-COMMUNITY | Ensure SNMP community strings 'public' and 'private' are not usedcisco-nxos · Level 1 | cisco-nxos | High | 1 | Automated |
| TMA-CISCO-NXOS-1.2.2 | Configure IP Blocking on Failed Loginscisco-nxos · Level 1 | cisco-nxos | Medium | 1 | Automated |
| TMA-CISCO-NXOS-1.2.4 | Ensure Exec Timeout for Console Sessions is set for less than 10cisco-nxos · Level 1 | cisco-nxos | Medium | 1 | Automated |
| TMA-CISCO-NXOS-1.5.1 | Ensure Syslog Logging is configuredcisco-nxos · Level 2 | cisco-nxos | Medium | 2 | Automated |