Security Basics: RE: R: CISCO Catalyst

["Erik Soosalu" <eriks () nationalfastfreight com>]

Speaking of auditting configs, there is also Centre of Information Security RAT:
 
http://www.cisecurity.org/bench_cisco.html
 
Erik
 

________________________________

From: listbounce () securityfocus com on behalf of Jens Link
Sent: Wed 1/23/2008 4:13 PM
To: security-basics () securityfocus com
Subject: Re: R: CISCO Catalyst



"Vega - Brunello Ivan" <I.Brunello () vegaspa it> writes:

> AFAIK the only one (for tacacs) is Cisco own ACS product.  Dunno if
> there are cheaper (and better) alternatives.
Sure there is: http://www.shrubbery.net/tac_plus/ BTW: I don't like
Cisco ACS or any other management application from Cisco I've seen so
far. Way to big with, hard to use and some very strange bugs. 

RANCID (http://www.shrubbery.net/rancid/) was mentioned also here and
it's the best tool to track configuration changes in your network equipment.

And if you want to perform some automatic auditing of configs, take a
look at NIPPER (http://sourceforge.net/projects/nipper).

cheers

Jens
--
sage () guug Berlin: http://www.guug.de/lokal/berlin/index.html
                  http://www.openbc.com/go/invita/4269460