Chapter 2 Cisco SDM Express Edit Mode

Security Settings

Refresh/Apply Changes/Discard Changes Buttons

These buttons are visible if you are editing an initial configuration. Click

Cisco SDM Express Buttons for more information.

Security Settings

This window lets you disable features that are on by default in the Cisco IOS software, but that can create security risks, or make the router send messages at such a high volume that it would use up its available memory. You should leave the boxes checked unless you know that your requirements are different.

If you allow SDM Express to make these settings and you later want to change any of the individual setting described under these setting groups, you can do so by using SDM. For more information, click Cisco Router and Security Device Manager.

Select All (Recommended by Cisco) Checkbox

Clicking Select All lets you implement all security settings in this window. If you later decide you want to change the security settings, you can do so using Cisco SDM.

Disable Services that Involve Security Risks Checkbox

Check this box to disable the following services on the router. For an explanation of why these services should be disabled, click the links below:

Disable Finger Service

Disable PAD Service

Disable TCP Small Servers Service

Disable UDP Small Servers Service

Disable IP BOOTP Server Service

Disable IP Identification Service

Disable CDP

Disable IP Source Route

Disable IP Gratuitous ARPs

 

Cisco SDM Express

2-10

OL-7141-04

Page 62
Image 62
321 Studios OL-7141-04 Select All Recommended by Cisco Checkbox, Disable Services that Involve Security Risks Checkbox