Details

TFTP client and server should be disabled as they do not require any authentication.

Secure File Transfer Protocol (SFTP) and Secure Copy Protocol (SCP) are part of the SSH protocol suite.

Solution

The command to disable TFTP client is as followsn

ProCurve Switch(config)# no tftp clientn

Supportive Information

The following resource is also helpful.

• http://www.hp.com/rnd/pdfs/Hardening_ProCurve_Switches_White_Paper.pdf

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system HPProCurve.

References

• 800-53|CM-7b.
• CSCv6|9.1

Source

• Tenable.com/audits