Home
Security Hardening
DISA STIG Cisco IOS XE Switch NDM V2R2

DISA STIG Cisco IOS XE Switch NDM V2R2

CISC-ND-000590 – The Cisco switch must be configured to enforce password complexity by requiring that at least one numeric character be used.
Details Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity,...
CISC-ND-000600 – The Cisco switch must be configured to enforce password complexity by requiring that at least one special character be used.
Details Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity,...
CISC-ND-000610 – The Cisco switch must be configured to require that when a password is changed, the characters are changed in at least eight of the positions within the password.
Details If the application allows the user to consecutively reuse extensive portions of passwords, this increases the chances of password...
CISC-ND-000580 – The Cisco switch must be configured to enforce password complexity by requiring that at least one lower-case character be used.
Details Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity,...
CISC-ND-000620 – The Cisco switch must only store cryptographic representations of passwords – enable secret
Details Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords...
CISC-ND-000620 – The Cisco switch must only store cryptographic representations of passwords – service password-encryption
Details Passwords need to be protected at all times, and encryption is the standard method for protecting passwords. If passwords...
CISC-ND-000720 – The Cisco switch must be configured to terminate all network connections associated with device management after 10 minutes of inactivity – ip http secure-server
Details Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take...
CISC-ND-000720 – The Cisco switch must be configured to terminate all network connections associated with device management after 10 minutes of inactivity – ip http timeout
Details Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take...
CISC-ND-000720 – The Cisco switch must be configured to terminate all network connections associated with device management after 10 minutes of inactivity – line con
Details Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take...
CISC-ND-000720 – The Cisco switch must be configured to terminate all network connections associated with device management after 10 minutes of inactivity – line vty
Details Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take...

Prev Next

DISA STIG Cisco IOS XE Switch NDM V2R2

CISC-ND-000590 – The Cisco switch must be configured to enforce password complexity by requiring that at least one numeric character be used.

CISC-ND-000600 – The Cisco switch must be configured to enforce password complexity by requiring that at least one special character be used.

CISC-ND-000610 – The Cisco switch must be configured to require that when a password is changed, the characters are changed in at least eight of the positions within the password.

CISC-ND-000580 – The Cisco switch must be configured to enforce password complexity by requiring that at least one lower-case character be used.

CISC-ND-000620 – The Cisco switch must only store cryptographic representations of passwords – enable secret

CISC-ND-000620 – The Cisco switch must only store cryptographic representations of passwords – service password-encryption

CISC-ND-000720 – The Cisco switch must be configured to terminate all network connections associated with device management after 10 minutes of inactivity – ip http secure-server

CISC-ND-000720 – The Cisco switch must be configured to terminate all network connections associated with device management after 10 minutes of inactivity – ip http timeout

CISC-ND-000720 – The Cisco switch must be configured to terminate all network connections associated with device management after 10 minutes of inactivity – line con

CISC-ND-000720 – The Cisco switch must be configured to terminate all network connections associated with device management after 10 minutes of inactivity – line vty