Owners Manual

Table Of Contents
Standard Change Management Policies
34
Cisco Compliance Actions
Remedial actions are often part of the process of change management. These may be
triggered by the Cisco Event Processing Rules, and are included as part of the
Standard Change Management Policies
Compliance Cisco AAA LoginTo avoid being locked out of the router, define
username and password on the access server before starting the AAA
configuration.
Compliance Cisco Finger Service (11.3-12.0 & 12.1+)Disables the ip finger
service.
Compliance Cisco HTTP ServerDisables http.
Compliance Cisco Identd ServiceDisables identd
Compliance Cisco IP Source RouteDisables ip source route
Compliance Cisco UDP Small-Servers (11.2- and 11.3+)Disables PCI UDP Small-
Servers (11.2- and 11.3+).
Compliance Cisco TCP Small-ServersDisplace PCI Cisco TCP Small-Servers.
Compliance Cisco BOOTP ServerDisables PCI Cisco BOOTP Server.
Compliance Cisco PAD ServiceDisables the PAD service.
Compliance Cisco Timestamps LoggingEnables PCI Cisco Timestamps Logging.
Compliance Cisco SNMP RW CommunitiesRemoves RW community string with
user input.
Compliance Cisco Password EncryptionEnables PCI Cisco Password Encryption.
Compliance Cisco CDP ServiceDisables CDP Cisco Discovery Protocol.
COMPLIANCE Cisco VTY Transport Input Limit
COMPLIANCE Cisco VTY Login
COMPLIANCE Cisco VTY Exec Timeout
COMPLIANCE Cisco VTY Access Class Inbound
COMPLIANCE Cisco Set Login on Console Port
COMPLIANCE Cisco Service Config
COMPLIANCE Cisco SNMP RW Communities
COMPLIANCE Cisco Password Encryption
COMPLIANCE Cisco PAD Service
COMPLIANCE Cisco NTP Redundant Servers
COMPLIANCE Cisco Enable Secret
COMPLIANCE Cisco Disable NTP
COMPLIANCE Cisco Disable MOP
COMPLIANCE Cisco Console Exec Timeout