2022-05-28 08:26:55 +00:00
id : disable-ip-source-route
info :
name : Disable IP source-route
author : pussycat0x
severity : info
2022-05-31 06:21:05 +00:00
description : |
Organizations should plan and implement network policies to ensure unnecessary services are explicitly disabled. The 'ip source-route' feature has been used in several attacks and should be disabled.
reference :
- https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr/command/ipaddr-cr-book/ipaddr-i4.html#GUID-C7F971DD-358F-4B43-9F3E-244F5D4A3A93
tags : cisco,config-audit,cisco-switch,router
2022-05-28 08:26:55 +00:00
file :
- extensions :
- conf
matchers-condition : and
matchers :
- type : word
words :
- "no ip source-route"
2022-05-28 08:31:12 +00:00
negative : true
2022-05-31 14:43:08 +00:00
- type : word
words :
- "configure terminal"
