ACS 4.2- Query

[Prasan Venky]

Dear Experts,

In cisco ACS 4.2, how to disable finger service in ACS 4.2 version. This is from an audit and they advised to disable it. Please find the audit comment on this.

"Finger server supports the Unix ‘finger’ protocol, which is used for querying a host about its logged in users.

The finger service is very dangerous because it provides extensive user information, which is extremely valuable for hacking

It is recommanded finger service should be disabled"

Thanks in advance.

KVS

[Prasan Venky]

Guyz,

Any Help ...

[sahseth]

Hello,

I beleive there is no explicit option to disable Finger sevices on ACS 4.2 but to prevent from external attack you can prevent tcp port 79 on Distribution Firewall.

We are still working for other way around to fix this explicitly.

Thanks,

[Prasan Venky]

Hi Sahil,

Thank you for your responds, Could you please share any reference for this.

Thanks in advance..

Regards,

KVS