Details

Enables the authentication of OSPF neighbor before routing information is received from the neighbor

Rationale:

Enabling the routing protocol authentication prevents against attackers who can send wrong routing information in order to redirect traffic to their network or send malformed packets in order to saturate and to exhaust the control plane.

NOTE: This check is N/A as OSPF routing is not enabled.

Solution

Firepower Management Center:

Step 1
Choose Devices > Device Management, and edit the FTD device.

Step 2
Select Routing > OSPF.

Supportive Information

The following resource is also helpful.

• https://www.cisco.com/c/en/us/td/docs/security/firepower/640/hardening/ftd/FTD_Hardening_Guide_v64.htmlhttps://www.cisco.com/c/en/us/td/docs/security/firepower/640/hardening/ftd/FTD_Hardening_Guide_v64.html

This security hardening control applies to the following category of controls within NIST 800-53: Identification and Authentication.This control applies to the following type of system Cisco_Firepower.

References

• 800-53|IA-3(1)

Source

• Tenable.com/audits