Detections
Analytics

1.4.4.2 Ensure 'aaa authorization exec' is configured correctly

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Limits the access to the privileged EXEC mode

Rationale:

When a user is placed in the privileged EXEC mode, valuable information can be obtained. The AAA authorization exec enforces the segregation of users rights so that only authorized users can get access to the privileged EXEC mode. Once this feature is enabled, the user rights are provided by the authentication servers mentioned in the AAA authentication console and AAA authentication enable schemes.

Solution

Run the following to enable the AAA authorization exec

HOSTNAME(CONFIG)# AAA AUTHORIZATION EXEC AUTHENTICATION-SERVER

See Also

https://benchmarks.cisecurity.org/tools2/cisco/CIS_Cisco_Firewall_Benchmark_v4.0.0.pdf

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6

Plugin: Cisco

Control ID: 8f75a09786c9eadb7689758f688c3fa1479029554f5ec7a068fa3a8f458d239c