Home
Security Hardening
DISA STIG Cisco IOS XE Switch NDM V2R2

DISA STIG Cisco IOS XE Switch NDM V2R2

CISC-ND-000390 – The Cisco switch must be configured to protect audit information from unauthorized deletion.
Details Audit information includes all information (e.g., audit records, audit settings, and audit reports) needed to successfully audit information system...
CISC-ND-000460 – The Cisco switch must be configured to limit privileges to change the software resident within software libraries.
Details Changes to any software components of the network device can have significant effects on the overall security of the...
CISC-ND-000470 – The Cisco switch must be configured to prohibit the use of all unnecessary and nonsecure functions and services – boot network
Details Network devices are capable of providing a wide variety of functions and services. Some of the functions and services...
CISC-ND-000470 – The Cisco switch must be configured to prohibit the use of all unnecessary and nonsecure functions and services – ip boot server
Details Network devices are capable of providing a wide variety of functions and services. Some of the functions and services...
CISC-ND-000490 – The Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable – aaa auth
Details Authentication for administrative (privileged level) access to the device is required at all times. An account can be created...
CISC-ND-000490 – The Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable – account
Details Authentication for administrative (privileged level) access to the device is required at all times. An account can be created...
CISC-ND-000530 – The Cisco switch must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts – ip ssh server algorithm
Details A replay attack may enable an unauthorized user to gain access to the application. Authentication sessions between the authenticator...
CISC-ND-000530 – The Cisco switch must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts – ip ssh version 2
Details A replay attack may enable an unauthorized user to gain access to the application. Authentication sessions between the authenticator...
CISC-ND-000550 – The Cisco switch must be configured to enforce a minimum 15-character password length.
Details Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and...
CISC-ND-000570 – The Cisco switch must be configured to enforce password complexity by requiring that at least one upper-case character be used.
Details Use of a complex passwords helps to increase the time and resources required to compromise the password. Password complexity,...

Prev Next

DISA STIG Cisco IOS XE Switch NDM V2R2

CISC-ND-000390 – The Cisco switch must be configured to protect audit information from unauthorized deletion.

CISC-ND-000460 – The Cisco switch must be configured to limit privileges to change the software resident within software libraries.

CISC-ND-000470 – The Cisco switch must be configured to prohibit the use of all unnecessary and nonsecure functions and services – boot network

CISC-ND-000470 – The Cisco switch must be configured to prohibit the use of all unnecessary and nonsecure functions and services – ip boot server

CISC-ND-000490 – The Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable – aaa auth

CISC-ND-000490 – The Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable – account

CISC-ND-000530 – The Cisco switch must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts – ip ssh server algorithm

CISC-ND-000530 – The Cisco switch must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts – ip ssh version 2

CISC-ND-000550 – The Cisco switch must be configured to enforce a minimum 15-character password length.

CISC-ND-000570 – The Cisco switch must be configured to enforce password complexity by requiring that at least one upper-case character be used.