Either Allow for the Entry Security Analyzer to check all sensitive fields or have an option for a second or enabled password in username / Passwrd

Backlog

Either Allow for the Entry Security Analyzer to check all sensitive fields or have an option for a second or enabled password in username / Passwrd

0 vote

avatar

Request to audit all passwords for strength and having a lot of passwords that use the custom entry 1 with sensitive flags set I don't know if the if that flag is set that the entery security analyzer will check those passwords. Honestly it would be nice to have a second password field that can be generated and checked in the report for all the devices that have elevation passwords.

All Comments (4)

avatar

Hello,

Thank you for the request. If I understand correctly, you would like to analyze the sensitive information that you could find in your custom field ? Am I understanding the right thing ? You also specified that it could be nice to have a second password field, but when this field would be used ? I'm not sure to understand that part.

Best regards,

François Dubois

avatar

Sorry let me see if I can be clear. We have about 30k in Cisco Devices we manage that have enable passwords so same user account name but has two different passwords for that credential. We have been using a custom field 1 with the sensitive flag set. But the Request has come down from upper management to audit the enable passwords to make sure they are not in a breached database or compromised. So reuqest is to audit the Sensitive lines for passwords or have an credential that has ability for 2 passwords with that a converter to transform credentials from username password customfield1 to username password password

avatar

Hello,

Thank you for information. We will talk internaly to see what could be done to support a such case and let you know when we have more information.

Best regards,

François Dubois

avatar

Hello,

We had discussion internally and we have questions. If you have multiple passwords, would it be possible to use a password list entry ?

forum image

That kind of entry allows you to have many passwords and that entry can be linked with the devices. And all passwords in that entry are analyzed in the report. Let us know if that could help you in your situation.

Best regards,

François Dubois