Cisco Systems 2.5 Security Audit

24-1
Cisco Router and Security Device Manager 2.5 User’s Guide
OL-4015-12
CHAPT ER
24
Security Audit
Security Audit is a feature that examines your existing router configurations and
then updates your router in order to make your router and network more secure.
Security Audit is based on the Cisco IOS AutoSecure feature; it performs checks
on and assists in configuration of almost all of the AutoSecure functions. For a
complete list of the functions that Security Audit checks for, and for a list of the
few AutoSecure features unsupported by Security Audit, see the topic Cisco SDM
and Cisco IOS AutoSecure.
Security Audit operates in one of two modes—the Security Audit wiz ard, which
lets you choose which potential security-related configuration changes to
implement on your router, and One-Step Lockdown, which automatically makes
all recommended security-related configuration ch anges.
Perform Security Audit
This option starts the Security Audit wizard. The Security Audit wizard tests your
router configuration to determine if any potential security problems exist in the
configuration, and then presents you with a screen that lets you determine which
of those security problems you want to fix. Once determined, the Security Audit
wizard will make the necessary changes to the router configuration to fix those
problems.
To have Cisco SDM perform a security audit and then fix the problems it has found:
Step1 In the left frame, select Security Audit.
Step2 Click Perform Security Audit.