Hardening cisco devices

[vincent-n]

HI there

I'm looking for some Cisco documentations of how to "harden" a Cisco device. I'm after those on IOS routers, PIX Firewalls, SET command switches and also IOS command switches. Did a search on CCO but could not find anything useful. Thanks in advance for your help.

[mostiguy · Accepted solution]

IOS:

http://www.cisecurity.org/bench_cisco.html

http://www.nsa.gov/snac/downloads_cisco.cfm?MenuID=scg10.3.1

i am not aware of any such guides for pixen or catalyst os devices, but a lot of the ideas are the same (i.e., assess who you are allowing admin/snmp/etc access to by ip address,etc