Home
Security Hardening
DISA STIG Cisco NX OS Switch NDM V2R3

DISA STIG Cisco NX OS Switch NDM V2R3

CISC-ND-000010 – The Cisco switch must be configured to limit the number of concurrent management sessions to an organization-defined number.
Details Device management includes the ability to control the number of administrators and management sessions that manage a device. Limiting...
CISC-ND-000090 – The Cisco switch must be configured to automatically audit account creation – aaa accounting default group
Details Upon gaining access to a network device, an attacker will often first attempt to create a persistent method of...
CISC-ND-000090 – The Cisco switch must be configured to automatically audit account creation – servers
Details Upon gaining access to a network device, an attacker will often first attempt to create a persistent method of...
CISC-ND-000100 – The Cisco switch must be configured to automatically audit account modification – aaa accounting default group
Details Since the accounts in the network device are privileged or system-level accounts, account management is vital to the security...
CISC-ND-000100 – The Cisco switch must be configured to automatically audit account modification – servers
Details Since the accounts in the network device are privileged or system-level accounts, account management is vital to the security...
CISC-ND-000110 – The Cisco switch must be configured to automatically audit account disabling actions – aaa accounting default group
Details Account management, as a whole, ensures access to the network device is being controlled in a secure manner by...
CISC-ND-000110 – The Cisco switch must be configured to automatically audit account disabling actions – servers
Details Account management, as a whole, ensures access to the network device is being controlled in a secure manner by...
CISC-ND-000120 – The Cisco switch must be configured to automatically audit account removal actions – aaa accounting default group
Details Account management, as a whole, ensures access to the network device is being controlled in a secure manner by...
CISC-ND-000120 – The Cisco switch must be configured to automatically audit account removal actions – servers
Details Account management, as a whole, ensures access to the network device is being controlled in a secure manner by...
CISC-ND-000140 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – line vty access-class
Details A mechanism to detect and prevent unauthorized communication flow must be configured or provided as part of the system...

DISA STIG Cisco NX OS Switch NDM V2R3

CISC-ND-000010 – The Cisco switch must be configured to limit the number of concurrent management sessions to an organization-defined number.

CISC-ND-000090 – The Cisco switch must be configured to automatically audit account creation – aaa accounting default group

CISC-ND-000090 – The Cisco switch must be configured to automatically audit account creation – servers

CISC-ND-000100 – The Cisco switch must be configured to automatically audit account modification – aaa accounting default group

CISC-ND-000100 – The Cisco switch must be configured to automatically audit account modification – servers

CISC-ND-000110 – The Cisco switch must be configured to automatically audit account disabling actions – aaa accounting default group

CISC-ND-000110 – The Cisco switch must be configured to automatically audit account disabling actions – servers

CISC-ND-000120 – The Cisco switch must be configured to automatically audit account removal actions – aaa accounting default group

CISC-ND-000120 – The Cisco switch must be configured to automatically audit account removal actions – servers

CISC-ND-000140 – The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies – line vty access-class