Detections
Analytics

1.3.2 Ensure 'Image Authenticity' is correct

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Verifies for digitally signed images that the running image is from a trusted source

Rationale:

The software image being a code can be vulnerable to many attacks such as malicious code injection in the software, the modification of the code installed in the ROM. In order to ensure that the image running is from a trusted source, the image is digitally signed and its certificate should be verified.

Solution

* Step 1: Correct the errors on the hardware and software
* Step 2: Run the audit procedure until the system is compliant
* Step 3: Implement secure delivery of hardware and harden the software distribution server

See Also

https://benchmarks.cisecurity.org/tools2/cisco/CIS_Cisco_Firewall_Benchmark_v4.0.0.pdf

Item Details

Plugin: Cisco

Control ID: 9763fcd151b174dc1d26ed873f39b691977ab0aceef55bc90211018790b14662