The compliance scan will fail if 'show running-config all' and 'show version' do not have any output. This will depend on the customer configuration except for 'show version' and 'show running-configuration all' commands.
The commands listed above may or may not show the required output. Show interfaces status Cisco IOS-XE only: Show running-config full | i ^interface|ip vrf forwarding|ip address Show running-config full | i ^interface|vrf member|ip address Show running-config full | i ^interface|shutdown|ip proxy-arp Show running-config full | i ^interface|shutdown|ip unreachables Show running-config full | i ^interface|shutdown|ip redirects Show running-config all | i "^interface|ip vrf forwarding|ip address" Show running-config all | i "^interface|vrf member|ip address" Show running-config all | i ^interface|shutdown|ip proxy-arp Show running-config all | i ^interface|shutdown|ip unreachables Show running-config all | i ^interface|shutdown|ip redirects Show logging | include Syslog | Trap | Console | Monitor | Buffer logging Commands required for scanning Cisco IOS 15 / Cisco IOS-XE (all versions):
The configuration QID for Cisco IOS is QID 45229 "Cisco IOS Device Configurations Detected". Please assign the appropriate privilege level per your business needs and your organization's security policies.įor compliance scanning - this high level of privileges is required for the scan to be successful.įor vulnerability scanning - this high level of privileges is required for configuration based checks only. Important - Please be aware that sensitive configurations could be at risk when you grant access to commands to a user account with a lower privilege level. For authenticated scanning of Cisco IOS or IOS-XE devices you'll need to provide a user account with privilege level 15 (recommended) or an account with a lower privilege level as long as the account has been configured so that it's able to execute all of the commands that are required for scanning these devices.
0 kommentar(er)
