1. Home
  2. Security Hardening
  3. DISA STIG Cisco NX OS Switch NDM V2R3
  4. CISC-ND-000530 – The Cisco switch must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts – ip ssh version 2
Searching...

CISC-ND-000530 – The Cisco switch must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts – ip ssh version 2

Details

A replay attack may enable an unauthorized user to gain access to the application. Authentication sessions between the authenticator and the application validating the user credentials must not be vulnerable to a replay attack.

An authentication process resists replay attacks if it is impractical to achieve a successful authentication by recording and replaying a previous authentication message.

Solution

Enable fips mode via the command fips mode enable.

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Identification and Authentication.This control applies to the following type of system Cisco.

References

Source

Updated on July 16, 2022
Was this article helpful?
Yes No

Related Articles