Jul 14, 2026 Functional Update- 1.2.10 Set 'exec-timeout' to less than or equal to 10 min on 'ip http'
- 1.5.6 Create an 'access-list' for use with SNMP
Informational Update- 1.1.4 Set 'login authentication for 'line vty'
- 1.2.8 Set 'exec-timeout' to less than or equal to 10 minutes 'line vty'
- 1.5.4 Do not set 'RW' for any 'snmp-server community'
- 1.5.5 Set the ACL for each 'snmp-server community'
- 1.5.6 Create an 'access-list' for use with SNMP
- 1.5.9 Set 'priv' for each 'snmp-server group' using SNMPv3
- 2.1.1.1.1 Set the 'hostname'
- 2.1.1.1.2 Set the 'ip domain-name'
- 2.1.1.1.3 Set 'modulus' to greater than or equal to 2048 for 'crypto key generate rsa'
- 2.1.1.1.4 Set 'seconds' for 'ip ssh timeout' for 60 seconds or less
- 2.1.1.1.5 Set maximum value for 'ip ssh authentication-retries'
- 2.1.4 Set 'no service dhcp'
- 2.2.2 Set 'buffer size' for 'logging buffered'
- 2.2.6 Set 'service timestamps debug datetime'
- 2.2.7 Set 'logging source interface'
- 2.4.3 Set 'ntp source' to Loopback Interface
- 2.4.4 Set 'ip tftp source-interface' to the Loopback Interface
- 3.1.3 Set 'no interface tunnel'
- 3.1.4 Set 'ip verify unicast source reachable-via'
- 3.3.1.8 Set 'ip authentication key-chain eigrp'
- 3.3.1.9 Set 'ip authentication mode eigrp'
- 3.3.2.1 Set 'authentication message-digest' for OSPF area
- 3.3.2.2 Set 'ip ospf message-digest-key md5'
- 3.3.3.1 Set 'neighbor password'
|
Dec 4, 2025 Functional Update- 2.3.1.2 Set 'ntp authentication-key'
Informational Update- 1.5.8 Set 'snmp-server enable traps snmp'
Miscellaneous- Metadata updated.
- Platform check updated.
Added- CIS_Cisco_IOS_XE_17.x_v2.2.1_L1.audit from CIS Cisco IOS XE 17.x v2.2.1
Removed- CIS_Cisco_IOS_XE_17.x_v2.2.1_L1.audit from CIS Cisco IOS XE 17.x Benchmark v2.2.1
|
Oct 30, 2025 Functional Update- 2.2.2 Set 'buffer size' for 'logging buffered'
|
Sep 22, 2025 Functional Update- 2.1.1.1.1 Set the 'hostname'
- 2.2.2 Set 'buffer size' for 'logging buffered'
- 2.4.2 Set AAA 'source-interface'
- 3.3.3.1 Set 'neighbor password'
|
