Cisco ACE Hardening

[g-campbell]

Hi there,

I am looking for any documentation that formally addresses the hardening best practices or recommendations specific to ACE configuration.  There is plenty of Cisco IOS stuff out there but I would like to know if anyone has anything on the ACE, with examples if possible.

Appreciate any assistance.

Regards

[amacuz]

Hi there!

I'm not aware of any hardening guide. However since on the ACE you have to allow explicitly what can reach the box and what can pass through it this should be a good point as start. Indeed there are  many guides on the Internet, examples from there that apply the ACE can be used.

Alessandro

--

If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.

[aamercado]

Per bug ID: CSCts43507 dated May 2, 2016

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCts43507/?referring_site=bugquickviewredir

It saids "ACE Module should be hardened" but the "workaround: none"

I search and cannot find a hardening doc for the ACE. Seems like a catch22 if above bug ask to harden and workaround is none with no other resource via google or cisco web site. Any ideas how to harden the ACE in general with or without the reference to the bug id?

Thanks