1.4.3.4 Ensure 'aaa authentication serial console' is configured correctly

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Authenticates users who access the security appliance using the serial Console port.

Rationale:

Using AAA authentication for interactive management access to the device provides consistent, centralized control of your network. The default under AAA (local or network) is to require users to log in using a valid user name and password. This rule applies for both local and network AAA. Fallback mode should also be enabled to allow emergency access to the firewall in the event that the AAA server was unreachable, by utilizing the LOCAL keyword after the AAA server-tag.

Solution

Configure the aaa authentication serial using the TACACS+ server-group as primary method and the local database as backup method.

HOSTNAME(CONFIG)#AAA AUTHENTICATION SERIAL CONSOLE <_server-group_name_> LOCAL

See Also

https://benchmarks.cisecurity.org/tools2/cisco/CIS_Cisco_Firewall_Benchmark_v4.0.0.pdf

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-2

Plugin: Cisco

Control ID: b5f4dada250f32faedc9ea78ea3c7a33ad035fc086c0a893e652d0c6392640f3