Home
Security Hardening
DISA STIG Cisco IOS XE Router NDM V2R3

DISA STIG Cisco IOS XE Router NDM V2R3

CISC-ND-000490 – The Cisco router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.
Details Authentication for administrative (privileged level) access to the device is required at all times. An account can be created...
CISC-ND-000530 – The Cisco router must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts – ssh algorithm
Details A replay attack may enable an unauthorized user to gain access to the application. Authentication sessions between the authenticator...
CISC-ND-000530 – The Cisco router must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts – ssh version
Details A replay attack may enable an unauthorized user to gain access to the application. Authentication sessions between the authenticator...
CISC-ND-000550 – The Cisco router must be configured to enforce a minimum 15-character password length.
Details Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and...
CISC-ND-000570 – The Cisco router must be configured to enforce password complexity by requiring that at least one upper-case character be used.
Details Use of a complex passwords helps to increase the time and resources required to compromise the password. Password complexity,...
CISC-ND-000580 – The Cisco router must be configured to enforce password complexity by requiring that at least one lower-case character be used.
Details Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity,...
CISC-ND-000590 – The Cisco router must be configured to enforce password complexity by requiring that at least one numeric character be used.
Details Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity,...
CISC-ND-000600 – The Cisco router must be configured to enforce password complexity by requiring that at least one special character be used.
Details Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity,...
CISC-ND-000610 – The Cisco router must be configured to require that when a password is changed, the characters are changed in at least eight of the positions within the password.
Details If the application allows the user to consecutively reuse extensive portions of passwords, this increases the chances of password...
CISC-ND-000720 – The Cisco router must be configured to terminate all network connections associated with device management after 10 minutes of inactivity – ip http secure-server
Details Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take...

Prev Next

DISA STIG Cisco IOS XE Router NDM V2R3

CISC-ND-000490 – The Cisco router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.

CISC-ND-000530 – The Cisco router must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts – ssh algorithm

CISC-ND-000530 – The Cisco router must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts – ssh version

CISC-ND-000550 – The Cisco router must be configured to enforce a minimum 15-character password length.

CISC-ND-000570 – The Cisco router must be configured to enforce password complexity by requiring that at least one upper-case character be used.

CISC-ND-000580 – The Cisco router must be configured to enforce password complexity by requiring that at least one lower-case character be used.

CISC-ND-000590 – The Cisco router must be configured to enforce password complexity by requiring that at least one numeric character be used.

CISC-ND-000600 – The Cisco router must be configured to enforce password complexity by requiring that at least one special character be used.

CISC-ND-000610 – The Cisco router must be configured to require that when a password is changed, the characters are changed in at least eight of the positions within the password.

CISC-ND-000720 – The Cisco router must be configured to terminate all network connections associated with device management after 10 minutes of inactivity – ip http secure-server