Because of the rapid development of attack technology, the security problems of information assets are more serious. Security baseline monitoring and management is an important way to protect information assets. In this paper, we proposed an approach to acquiring information security baseline values of network devices through Secure Shell (SSH)/telnet simulation. Moreover, we implemented a security baseline acquisition system for network device based on the approach. Our approach can easily acquire the required security policy and properties of network device, so network administrator can monitor the configuration of network device and eliminate the security risk due to unqualified configuration.