Home
Security Hardening
DISA STIG Cisco IOS XE Switch NDM V2R2

DISA STIG Cisco IOS XE Switch NDM V2R2

CISC-ND-000010 – The Cisco switch must be configured to limit the number of concurrent management sessions to an organization-defined number – ip http max connections
Details Device management includes the ability to control the number of administrators and management sessions that manage a device. Limiting...
CISC-ND-000010 – The Cisco switch must be configured to limit the number of concurrent management sessions to an organization-defined number – session-limit
Details Device management includes the ability to control the number of administrators and management sessions that manage a device. Limiting...
CISC-ND-000090 – The Cisco switch must be configured to automatically audit account creation.
Details Upon gaining access to a network device, an attacker will often first attempt to create a persistent method of...
CISC-ND-000100 – The Cisco switch must be configured to automatically audit account modification.
Details Since the accounts in the network device are privileged or system-level accounts, account management is vital to the security...
CISC-ND-000110 – The Cisco switch must be configured to automatically audit account disabling actions.
Details Account management, as a whole, ensures access to the network device is being controlled in a secure manner by...
CISC-ND-000120 – The Cisco switch must be configured to automatically audit account removal actions.
Details Account management, as a whole, ensures access to the network device is being controlled in a secure manner by...
CISC-ND-000140 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – access-class deny
Details A mechanism to detect and prevent unauthorized communication flow must be configured or provided as part of the system...
CISC-ND-000140 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – line vty access-class
Details A mechanism to detect and prevent unauthorized communication flow must be configured or provided as part of the system...
CISC-ND-000140 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – line vty ssh
Details A mechanism to detect and prevent unauthorized communication flow must be configured or provided as part of the system...
CISC-ND-000140 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – management access-list
Details A mechanism to detect and prevent unauthorized communication flow must be configured or provided as part of the system...

DISA STIG Cisco IOS XE Switch NDM V2R2

CISC-ND-000010 – The Cisco switch must be configured to limit the number of concurrent management sessions to an organization-defined number – ip http max connections

CISC-ND-000010 – The Cisco switch must be configured to limit the number of concurrent management sessions to an organization-defined number – session-limit

CISC-ND-000090 – The Cisco switch must be configured to automatically audit account creation.

CISC-ND-000100 – The Cisco switch must be configured to automatically audit account modification.

CISC-ND-000110 – The Cisco switch must be configured to automatically audit account disabling actions.

CISC-ND-000120 – The Cisco switch must be configured to automatically audit account removal actions.

CISC-ND-000140 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – access-class deny

CISC-ND-000140 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – line vty access-class

CISC-ND-000140 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – line vty ssh

CISC-ND-000140 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – management access-list