Cisco Cisco Network Assistant Version 1.0 White Paper

Secure Network Foundation Implementation Guide for Single Site Deployments

Secure Network Foundation

Performing a Security Audit

Perform the following steps to run the security audit, which configures infrastructure protection services
on the router.

Note

Before running the security audit, use the CLI to configure a password that is more than six characters
in length to prevent users from being locked out when the router is reloaded.

Step 1

From the Main menu, click Configure and choose Security Audit from the Task pane.

Step 2

Click Perform Security Audit and then click Next.

Step 3

Choose the outside (untrusted) and inside (trusted) interfaces and click Next.

After the security audit is complete, a list of passed and failed items is displayed. Click Close.

Step 4

Leave the default setting of Select an option: Fix the security problems.

Step 5

Click the Fix all button to fix all of the security issues that have been identified and then clear the Cisco
Discovery Protocol (CDP) check box. This is necessary on the LAN, but not on the WAN; CDP must
manually be disabled on the WAN interface using the no cdp enable command. Click Next.

Note

Figure 5

displays the output of the security audit and the items that must be fixed.

Step 6

Follow the instructions, as prompted, to repair all of the security issues. When prompted to configure the
Advanced Firewall, click Cancel and then click Yes. (The basic firewall option will be configured in a
separate step.)

Step 7

In the summary window, review the options and click Finish.

Step 8

After the configuration is delivered to the router, click OK.

Note

We recommend consulting with legal counsel for the wording of the banner so that all local laws are
represented appropriately.