Cisco Auditing

Tenable Nessus may be used to audit the running configuration of Cisco routers and firewalls. Tenable Network Security provides several default audit policies based on Cisco recommendation and those from the Center for Information Security.

Example audit points include:

• Being able to turn on and off audit checks based on the version of IOS
• Requiring encrypted passwords
• Banning the use of common SNMP community strings
• Forcing the use of Secure Shell (SSH) to access the IOS console
• Ensuring the device does not allow unauthorized services