Upgrade Cisco DNA Center with critical upgrades, including security patches, as soon as possible after a patch announcement. If deploying Cisco DNA Center in a three-node cluster setup, verify that the cluster interfaces are connected in an isolated network. Isolation between the services used to administer and manage Cisco DNA Center and the services used to communicate with and manage your network devices.
If you have separate management and enterprise networks, connect Cisco DNA Center's management and enterprise interfaces to your management and enterprise networks, respectively. We strongly recommend that you follow these security recommendations:ĭeploy Cisco DNA Center in a private internal network and behind a firewall that does not expose Cisco DNA Center to an untrusted network, such as the internet. Understand and configure the security features correctly. Last Updated: JSecurity Hardening OverviewĬisco DNA Center provides many security features for itself, for the hosts and network devices that it monitors and manages. View Audit Logs in Syslog Server Using APIs.Browser-Based Appliance Configuration Wizard.SFTP Compatibility Mode in Older Cisco DNA Center Versions.SFTP Compatibility Mode in Newer Cisco DNA Center Versions.Certificates for Systems that Peer with Cisco DNA Center.Check the Certificate on the PnP Server.Configure the Device Certificate Lifetime.Provision a Rollover Subordinate CA Certificate.Change the Role of the PKI Certificate from Root to Subordinate.Generate a Certificate Request Using OpenSSL.Update the Cisco DNA Center Server Certificate.Change Web UI Users and Linux or Maglev User Password.Use of OCSP and CRL for HTTPS Connections by Cisco DNA Center.Change the Minimum TLS Version and Enable RC4-SHA (Not Secure).Secure Internet Access to Required Internet URLs and Fully Qualified Domain Names.Enable Cisco DNA Center Disaster Recovery.Secure Your Cisco DNA Center Deployment.Cisco DNA Center Security Best Practices Guide
0 kommentar(er)
