Detections
Analytics

CIS Cisco NX-OS L2 v1.1.0

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS Cisco NX-OS L2 v1.1.0

Updated: 5/23/2025

Authority: CIS

Plugin: Cisco

Revision: 1.2

Estimated Item Count: 24

File Details

Filename: CIS_Cisco_NX-OS-v1.1.0_Level_2.audit

Size: 102 kB

MD5: 4ee28f7de77d7921a2babb857d7a0c32
SHA256: 68ec1b7a961e534fd83fbd32f2644de2aaa54469cadcf4f694f52d229ea228de

Audit Items

DescriptionCategories
1.4.2 Configure Password Encryption
1.5.3 Configure SNMPv3
1.5.4 Configure SNMP Traps
1.5.5 Configure SNMP Source Interface for Traps
1.5.6 Do not Configure a Read Write SNMP Community String
1.6.1 Ensure Syslog Logging is configured
1.6.2 Log all Successful and Failed Administrative Logins
1.6.3 Configure Netflow on Strategic Ports
1.7.4 Configure NTP Authentication
1.8.1 Disable Power on Auto Provisioning (POAP)
1.8.2 Disable iPXE (Pre-boot eXecution Environment)
1.8.3 Set SSH Key Modulus Length
1.9 Use Dedicated 'mgmt' Interface and VRF for Administrative Functions
3.1.1.1 Configure EIGRP Authentication on all EIGRP Routing Devices
3.1.2.2 If Possible, Limit the BGP Routes Accepted from Peers
3.1.2.3 Configure BGP Authentication
3.1.3.2 Authenticate OSPF peers with MD5 authentication keys
3.1.4.2 Create and use a single Loopback Address for Routing Protocol Peering
3.1.4.3 Use Unicast Routing Protocols Only
3.3.2 Configure Storm Control
3.4.2 Configure CDP
3.5.1 Basic Fiber Channel Configuration
3.5.2 Configure FCoE Zoning
4.3 Configure Alerts on all Configuration Changes