If you have separate management and enterprise networks, connect Cisco DNA Center's management and enterprise interfaces to your management and enterprise networks, respectively. We strongly recommend that you follow these security recommendations:ĭeploy Cisco DNA Center in a private internal network and behind a firewall that does not expose Cisco DNA Center to an untrusted network, such as the internet. Understand and configure the security features correctly. Last Updated: JSecurity Hardening OverviewĬisco DNA Center provides many security features for itself, for the hosts and network devices that it monitors and manages.
Certificates for Systems that Peer with Cisco DNA Center.Check the Certificate on the PnP Server.Configure the Device Certificate Lifetime.Provision a Rollover Subordinate CA Certificate.Change the Role of the PKI Certificate from Root to Subordinate.Generate a Certificate Request Using OpenSSL.Update the Cisco DNA Center Server Certificate.Change Web UI Users and Linux or Maglev User Password.Use of OCSP and CRL for HTTPS Connections by Cisco DNA Center.Change the Minimum TLS Version and Enable RC4-SHA (Not Secure).Secure Internet Access to Required Internet URLs and Fully Qualified Domain Names.Enable Cisco DNA Center Disaster Recovery.Secure Your Cisco DNA Center Deployment.Cisco DNA Center Security Best Practices Guide
0 kommentar(er)
