Home
Security Hardening
DISA STIG Cisco IOS XR Router NDM V2R2

DISA STIG Cisco IOS XR Router NDM V2R2

CISC-ND-000010 – The Cisco router must be configured to limit the number of concurrent management sessions to an organization-defined number.
Details Device management includes the ability to control the number of administrators and management sessions that manage a device. Limiting...
CISC-ND-000140 – The Cisco router must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – access-class deny
Details A mechanism to detect and prevent unauthorized communication flow must be configured or provided as part of the system...
CISC-ND-000140 – The Cisco router must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – access-class permit
Details A mechanism to detect and prevent unauthorized communication flow must be configured or provided as part of the system...
CISC-ND-000140 – The Cisco router must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – line default
Details A mechanism to detect and prevent unauthorized communication flow must be configured or provided as part of the system...
CISC-ND-000140 – The Cisco router must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – vty-pool
Details A mechanism to detect and prevent unauthorized communication flow must be configured or provided as part of the system...
CISC-ND-000150 – The Cisco router must be configured to enforce the limit of three consecutive invalid logon attempts after which time lock out the user account from accessing the device for 15 minutes – aaa auth
Details By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise...
CISC-ND-000150 – The Cisco router must be configured to enforce the limit of three consecutive invalid logon attempts after which time lock out the user account from accessing the device for 15 minutes – line console
Details By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise...
CISC-ND-000150 – The Cisco router must be configured to enforce the limit of three consecutive invalid logon attempts after which time lock out the user account from accessing the device for 15 minutes – line default
Details By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise...
CISC-ND-000150 – The Cisco router must be configured to enforce the limit of three consecutive invalid logon attempts after which time lock out the user account from accessing the device for 15 minutes – server host
Details By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise...
CISC-ND-000160 – The Cisco router must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.
Details Display of the DoD-approved use notification before granting access to the network device ensures privacy and security notification verbiage...

DISA STIG Cisco IOS XR Router NDM V2R2

CISC-ND-000010 – The Cisco router must be configured to limit the number of concurrent management sessions to an organization-defined number.

CISC-ND-000140 – The Cisco router must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – access-class deny

CISC-ND-000140 – The Cisco router must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – access-class permit

CISC-ND-000140 – The Cisco router must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – line default

CISC-ND-000140 – The Cisco router must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – vty-pool

CISC-ND-000150 – The Cisco router must be configured to enforce the limit of three consecutive invalid logon attempts after which time lock out the user account from accessing the device for 15 minutes – aaa auth

CISC-ND-000150 – The Cisco router must be configured to enforce the limit of three consecutive invalid logon attempts after which time lock out the user account from accessing the device for 15 minutes – line console

CISC-ND-000150 – The Cisco router must be configured to enforce the limit of three consecutive invalid logon attempts after which time lock out the user account from accessing the device for 15 minutes – line default

CISC-ND-000150 – The Cisco router must be configured to enforce the limit of three consecutive invalid logon attempts after which time lock out the user account from accessing the device for 15 minutes – server host

CISC-ND-000160 – The Cisco router must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.