Home
Security Hardening
DISA STIG Cisco IOS Switch NDM V2R3

DISA STIG Cisco IOS Switch NDM V2R3

CISC-ND-000010 – The Cisco switch must be configured to limit the number of concurrent management sessions to an organization-defined number.
Details Device management includes the ability to control the number of administrators and management sessions that manage a device. Limiting...
CISC-ND-000010 – The Cisco switch must be configured to limit the number of concurrent management sessions to an organization-defined number – ip http max connections
Details Device management includes the ability to control the number of administrators and management sessions that manage a device. Limiting...
CISC-ND-000090 – The Cisco switch must be configured to automatically audit account creation.
Details Upon gaining access to a network device, an attacker will often first attempt to create a persistent method of...
CISC-ND-000100 – The Cisco switch must be configured to automatically audit account modification.
Details Because the accounts in the network device are privileged or system-level accounts, account management is vital to the security...
CISC-ND-000110 – The Cisco switch must be configured to automatically audit account disabling actions.
Details Account management, as a whole, ensures access to the network device is being controlled in a secure manner by...
CISC-ND-000120 – The Cisco switch must be configured to automatically audit account removal actions.
Details Account management, as a whole, ensures access to the network device is being controlled in a secure manner by...
CISC-ND-000140 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – line vty access-class
Details A mechanism to detect and prevent unauthorized communication flow must be configured or provided as part of the system...
CISC-ND-000140 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – line vty ssh
Details A mechanism to detect and prevent unauthorized communication flow must be configured or provided as part of the system...
CISC-ND-000140 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – management access-list
Details A mechanism to detect and prevent unauthorized communication flow must be configured or provided as part of the system...
CISC-ND-000150 – The Cisco switch must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must lock out the user account from accessing the device for 15 minutes.
Details By limiting the number of failed logon attempts, the risk of unauthorized system access via user password guessing, otherwise...

DISA STIG Cisco IOS Switch NDM V2R3

CISC-ND-000010 – The Cisco switch must be configured to limit the number of concurrent management sessions to an organization-defined number.

CISC-ND-000010 – The Cisco switch must be configured to limit the number of concurrent management sessions to an organization-defined number – ip http max connections

CISC-ND-000090 – The Cisco switch must be configured to automatically audit account creation.

CISC-ND-000100 – The Cisco switch must be configured to automatically audit account modification.

CISC-ND-000110 – The Cisco switch must be configured to automatically audit account disabling actions.

CISC-ND-000120 – The Cisco switch must be configured to automatically audit account removal actions.

CISC-ND-000140 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – line vty access-class

CISC-ND-000140 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – line vty ssh

CISC-ND-000140 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – management access-list

CISC-ND-000150 – The Cisco switch must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must lock out the user account from accessing the device for 15 minutes.