Chapter16 Security Audit
Fix It Page
16-6
Cisco Router and Security Device Manager Version 2.2 User’s Guide
OL-4015-08
you selected, collecting further input from you as necessary, and will then display
a list of the new configuration commands that will be added to the router
configuration.
Fix All
Click this button to place a check mark next to all of the potential security
problems listed on the Report Card screen.

Select an option: Undo Security Configurations

When this option is selected, SDM displays the security configurations that it can
undo. To have SDM undo all the security configurations, click Undo All. To
specify a security configuration that you want to undo, check the Undo box next
to it. Click Next> after you have specified which security configurations to undo.
You must select at least one security configuration to undo.
Undo All
Click the button to place a checkmark next to all the security configurations that
SDM can undo.
To see which security configurations SDM can undo, click:
Security Configurations SDM Can Undo

I want SDM to fix some problems, but undo other security configurations

If you want SDM to fix some security issues but undo other security
configurations that you do not need, you can run the Security Aud it wizard once
to specify the problems to fix, and then run it again so that you can select the
security configurations you want to undo.
Disable Finger Service
Security Audit disables the finger service whenever possible. Finger is used to
find out which users are logged into a network device. Although this information
is not usually tremendously sensitive, it can sometimes be useful to an attacker.
In addition, the finger service can be used in a specific type of Denial-of-Service
(DoS) attack called “Finger of death,” which involves sending a finger request to
a specific computer every minute, but never disconnecting.