Details

Network devices must have the PAD service disabled.

Packet Assembler Disassembler (PAD) is an X.25 component seldom used. It collects the data transmissions from the terminals and gathers them into a X.25 data stream and vice versa. PAD acts like a multiplexer for the terminals. If enabled, it can render the device open to attacks. Some voice vendors use PAD on internal routers.

Solution

Configure the device to disable the PAD service.

Supportive Information

The following resource is also helpful.

• https://iasecontent.disa.mil/stigs/zip/U_Network_L2_Switch_V8R27_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Cisco.

References

• 800-53|CM-7b.
• CAT|III
• CSCv6|9.1
• Rule-ID|SV-5614r3_rule
• STIG-ID|NET0722
• Vuln-ID|V-5614

Source

• Tenable.com/audits