Telnet is enabled on the device-checkpoint-gaia
Vendor: checkpoint
OS: gaia
Description:
Indeni will check if a device has Telnet enabled. Telnet is not encrypted and is therefore a security risk.
Remediation Steps:
Disable Telnet on the device.
How does this work?
If “telnet” is enabled on the device, it is recommanded to disable it and enable “ssh” to remediate the security risks.
Why is this important?
The system service “telnet” should be disabled on the device for security reasons.
Without Indeni how would you find this?
An administrator could log on to the device to identify whether telnet is enabled.
chkp-gaia-telnet-enabled
name: chkp-gaia-telnet-enabled
description: Identify whether or not telnet is enabled
type: monitoring
monitoring_interval: 30 minute
requires:
vendor: checkpoint
os.name: gaia
comments:
telnet-enabled:
why: |
The system service "telnet" should be disabled on the device for security reasons.
how: |
If "telnet" is enabled on the device, it is recommanded to disable it and enable "ssh" to remediate the security risks.
can-with-snmp: false
can-with-syslog: false
steps:
- run:
type: SSH
command: ${nice-path} -n 15 grep telnet /config/active; ${nice-path} -n 15
clish -c "show net-access telnet"
parse:
type: AWK
file: gaia-telnet-enabled.parser.1.awk
cross_vendor_telnet_enabled
Failed to fetch the data: https://bitbucket.org/indeni/indeni-knowledge/src/master/rules/templatebased/crossvendor/cross_vendor_telnet_enabled.scala