Home
Security Hardening
DISA STIG Cisco Firewall V8R25

DISA STIG Cisco Firewall V8R25

NET0392 – The ISSO must ensure the message is displayed at the remote console if an administrator is already logged in – ‘console alerts’
Details The ISSO must ensure the message is displayed at the remote console if an administrator is already logged in,...
NET0392 – The ISSO must ensure the message is displayed at the remote console if an administrator is already logged in – ‘monitor alerts’
Details The ISSO must ensure the message is displayed at the remote console if an administrator is already logged in,...
NET0395 – The ISSO must ensure the alarm message identifying the potential security violation makes accessible the audit record contents
Details The ISSO must ensure the alarm message identifying the potential security violation makes accessible the audit record contents associated...
NET0396 – The ISSO must ensure an alert will remain written on the consoles until acknowledged by an administrator.
Details Critical alerts require immediate response. Critical alerts must not roll off the screens. The requirements are necessary to ensure...
NET0398 – The ISSO must ensure an acknowledgement message identifying a reference to the potential security violation is logged
Details The ISSO must ensure an acknowledgement message identifying a reference to the potential security violation is logged and it...
NET0379 – The FA will ensure that if the firewall product operates on an OS platform, the host must be STIG compliant prior to the install
Details The FA will ensure that if the firewall product operates on an OS platform, the host must be STIG...
NET0380 – The firewall must reject requests for access from loopback address – ‘inside in’
Details The firewall must reject requests for access or services where the source address received by the firewall specifies a...
NET0380 – The firewall must reject requests for access from loopback address – ‘inside out’
Details The firewall must reject requests for access or services where the source address received by the firewall specifies a...
NET0405 – A service or feature that calls home to the vendor must be disabled.
Details Call home services or features will routinely send data such as configuration and diagnostic information to the vendor for...
NET0422 – Network devices must be configured with rotating keys used for authenticating IGP peers that have a duration of 180 days or less.
Details If the keys used for routing protocol authentication are guessed, the malicious user could create havoc within the network...

Prev Next

DISA STIG Cisco Firewall V8R25

NET0392 – The ISSO must ensure the message is displayed at the remote console if an administrator is already logged in – ‘console alerts’

NET0392 – The ISSO must ensure the message is displayed at the remote console if an administrator is already logged in – ‘monitor alerts’

NET0395 – The ISSO must ensure the alarm message identifying the potential security violation makes accessible the audit record contents

NET0396 – The ISSO must ensure an alert will remain written on the consoles until acknowledged by an administrator.

NET0398 – The ISSO must ensure an acknowledgement message identifying a reference to the potential security violation is logged

NET0379 – The FA will ensure that if the firewall product operates on an OS platform, the host must be STIG compliant prior to the install

NET0380 – The firewall must reject requests for access from loopback address – ‘inside in’

NET0380 – The firewall must reject requests for access from loopback address – ‘inside out’

NET0405 – A service or feature that calls home to the vendor must be disabled.

NET0422 – Network devices must be configured with rotating keys used for authenticating IGP peers that have a duration of 180 days or less.