R12.1-JA-2025June05

Network Security

You can encrypt a variety of sensitive data in the configuration file of each device and on the user interface using Enable Encryption for Sensitive Data option.


Check BoxDefault ValueDescription
Enable Encryption for Sensitive DataEnabled

If this check box is not selected, the encryption for sensitive data is disabled and you cannot select either of the following two encryption methods.

The sensitive data include:

  • Line and console passwords
  • Local user passwords
  • Enable passwords
  • Enable Secret
  • SNMP community string
  • TACACS and Radius keys
  • VPN Keys and/or Certs
  • SSH Private keys (these may show up on CSS devices)
Mask Data at Back-end (no traceback)EnabledThis method allows you to replace the matched texts both in the database and UI with asterisks (***).
Only Mask Data on User InterfaceDisabledThis method allows you to replace the matched texts displayed in the UI with asterisks (***).  Note that the corresponding texts are not replaced in the database.
Information NoteAny changes to the settings will take effect starting from the next discovery and benchmark task.