Home
Security Hardening
DISA STIG Cisco NX OS Switch NDM V2R3

DISA STIG Cisco NX OS Switch NDM V2R3

CISC-ND-000330 – The Cisco switch must be configured to generate audit records containing the full-text recording of privileged commands – servers
Details Reconstruction of harmful events or forensic analysis is not possible if audit records do not contain enough information. Organizations...
CISC-ND-000470 – The Cisco switch must be configured to prohibit the use of all unnecessary and nonsecure functions and services – boot network
Details Network devices are capable of providing a wide variety of functions and services. Some of the functions and services...
CISC-ND-000470 – The Cisco switch must be configured to prohibit the use of all unnecessary and nonsecure functions and services – ip boot server
Details Network devices are capable of providing a wide variety of functions and services. Some of the functions and services...
CISC-ND-000490 – The Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable – aaa authentication login default fallback
Details Authentication for administrative (privileged level) access to the device is required at all times. An account can be created...
CISC-ND-000490 – The Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable – aaa authentication login default group
Details Authentication for administrative (privileged level) access to the device is required at all times. An account can be created...
CISC-ND-000490 – The Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable – account
Details Authentication for administrative (privileged level) access to the device is required at all times. An account can be created...
CISC-ND-000530 – The Cisco switch must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts – ip ssh version 2
Details A replay attack may enable an unauthorized user to gain access to the application. Authentication sessions between the authenticator...
CISC-ND-000570 – The Cisco switch must be configured to enforce password complexity by requiring that at least one upper-case character be used.
Details Use of a complex passwords helps to increase the time and resources required to compromise the password. Password complexity,...
CISC-ND-000580 – The Cisco switch must be configured to enforce password complexity by requiring that at least one lower-case character be used.
Details Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity,...
CISC-ND-000590 – The Cisco switch must be configured to enforce password complexity by requiring that at least one numeric character be used.
Details Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity,...

Prev Next

DISA STIG Cisco NX OS Switch NDM V2R3

CISC-ND-000330 – The Cisco switch must be configured to generate audit records containing the full-text recording of privileged commands – servers

CISC-ND-000470 – The Cisco switch must be configured to prohibit the use of all unnecessary and nonsecure functions and services – boot network

CISC-ND-000470 – The Cisco switch must be configured to prohibit the use of all unnecessary and nonsecure functions and services – ip boot server

CISC-ND-000490 – The Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable – aaa authentication login default fallback

CISC-ND-000490 – The Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable – aaa authentication login default group

CISC-ND-000490 – The Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable – account

CISC-ND-000530 – The Cisco switch must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts – ip ssh version 2

CISC-ND-000570 – The Cisco switch must be configured to enforce password complexity by requiring that at least one upper-case character be used.

CISC-ND-000580 – The Cisco switch must be configured to enforce password complexity by requiring that at least one lower-case character be used.

CISC-ND-000590 – The Cisco switch must be configured to enforce password complexity by requiring that at least one numeric character be used.