Home
Security Hardening
DISA STIG Cisco NX OS Switch NDM V2R3

DISA STIG Cisco NX OS Switch NDM V2R3

CISC-ND-001030 – The Cisco switch must be configured to synchronize its clock with the primary and secondary time sources using redundant authoritative time sources – ntp commit
Details The loss of connectivity to a particular authoritative time source will result in the loss of time synchronization (free-run...
CISC-ND-001030 – The Cisco switch must be configured to synchronize its clock with the primary and secondary time sources using redundant authoritative time sources – ntp distribute
Details The loss of connectivity to a particular authoritative time source will result in the loss of time synchronization (free-run...
CISC-ND-001030 – The Cisco switch must be configured to synchronize its clock with the primary and secondary time sources using redundant authoritative time sources – ntp servers
Details The loss of connectivity to a particular authoritative time source will result in the loss of time synchronization (free-run...
CISC-ND-001050 – The Cisco switch must be configured to record time stamps for log records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
Details If time stamps are not consistently applied and there is no common time reference, it is difficult to perform...
CISC-ND-001130 – The Cisco switch must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC) – snmp-server user sha
Details Without authenticating devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity. Bidirectional authentication provides stronger safeguards...
CISC-ND-001130 – The Cisco switch must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC) – show snmp user
Details Without authenticating devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity. Bidirectional authentication provides stronger safeguards...
CISC-ND-001130 – The Cisco switch must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC) – snmp-server host
Details Without authenticating devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity. Bidirectional authentication provides stronger safeguards...
CISC-ND-001130 – The Cisco switch must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC) – snmp-server user md5
Details Without authenticating devices, unidentified or unknown devices may be introduced, thereby facilitating malicious activity. Bidirectional authentication provides stronger safeguards...
CISC-ND-001140 – The Cisco switch must be configured to encrypt SNMP messages using a FIPS 140-2 approved algorithm – snmp-server user aes-128
Details Without the strong encryption that is provided by the SNMP Version 3 User-based Security Model (USM), an unauthorized user...
CISC-ND-001140 – The Cisco switch must be configured to encrypt SNMP messages using a FIPS 140-2 approved algorithm – snmp-server user non aes-128
Details Without the strong encryption that is provided by the SNMP Version 3 User-based Security Model (USM), an unauthorized user...

DISA STIG Cisco NX OS Switch NDM V2R3

CISC-ND-001030 – The Cisco switch must be configured to synchronize its clock with the primary and secondary time sources using redundant authoritative time sources – ntp commit

CISC-ND-001030 – The Cisco switch must be configured to synchronize its clock with the primary and secondary time sources using redundant authoritative time sources – ntp distribute

CISC-ND-001030 – The Cisco switch must be configured to synchronize its clock with the primary and secondary time sources using redundant authoritative time sources – ntp servers

CISC-ND-001050 – The Cisco switch must be configured to record time stamps for log records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

CISC-ND-001130 – The Cisco switch must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC) – snmp-server user sha

CISC-ND-001130 – The Cisco switch must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC) – show snmp user

CISC-ND-001130 – The Cisco switch must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC) – snmp-server host

CISC-ND-001130 – The Cisco switch must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC) – snmp-server user md5

CISC-ND-001140 – The Cisco switch must be configured to encrypt SNMP messages using a FIPS 140-2 approved algorithm – snmp-server user aes-128

CISC-ND-001140 – The Cisco switch must be configured to encrypt SNMP messages using a FIPS 140-2 approved algorithm – snmp-server user non aes-128