Name: Automated Assessment Software (AAS) for Cisco PIX 7.x and IOS 12.x Purpose: NIST 800-53 Technical Controls Audit Software Updated: Unreleased Category: Software

Currently in development. Written in Java (J2SE 6), this software scans your Cisco PIX 7.x firewall and/or Cisco IOS 12.x router or switch and produces a report detailing compliance with the NIST 800-53 (Rev. 2) technical controls. NIST SP 800-53 is the Recommended Security Controls for Federal Information Systems.

Features

Current:

• Graphical User Interface (Swing)
• Remote assessment via SSH (or pre-fetched config file)
• Exceptions detailing (for site-specific or N/A controls)
• Interactive prompts for manual questions
• Results output in XML, CSV or a report-ready text document (flat file)

• Delayed completion of manual questions (save and continue)
• Encrypt output (AES256)