ARST-ND-000010 - The Arista network device must limit the number of concurrent sessions to an organization-defined number for each administrator account and/or administrator account type.

800-53|AC-10

CAT|II

CCI|CCI-000054

Rule-ID|SV-255947r960735_rule

STIG-ID|ARST-ND-000010

Vuln-ID|V-255947

ARST-ND-000110 - The Arista network device must enforce approved authorizations for controlling the flow of management information within the network device based on information flow control policies.

800-53|AC-4

CCI|CCI-001368

CCI|CCI-004192

Rule-ID|SV-255948r991781_rule

STIG-ID|ARST-ND-000110

Vuln-ID|V-255948

ARST-ND-000120 - The Arista network device must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must block any login attempt for 15 minutes.

800-53|AC-7a.

CCI|CCI-000044

Rule-ID|SV-255949r960840_rule

STIG-ID|ARST-ND-000120

Vuln-ID|V-255949

ARST-ND-000130 - The Arista network device must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the device.

800-53|AC-8a.

800-53|AC-8b.

CCI|CCI-000048

CCI|CCI-000050

Rule-ID|SV-255950r960843_rule

STIG-ID|ARST-ND-000130

Vuln-ID|V-255950

ARST-ND-000150 - The Arista network device must be configured to audit all administrator activity.

800-53|AC-2(4)

800-53|AC-6(9)

800-53|AU-3(1)

800-53|AU-10

800-53|AU-12c.

CCI|CCI-000018

CCI|CCI-000135

CCI|CCI-000166

CCI|CCI-000172

CCI|CCI-001403

CCI|CCI-001404

CCI|CCI-001405

CCI|CCI-002130

CCI|CCI-002234

Rule-ID|SV-255951r960777_rule

STIG-ID|ARST-ND-000150

Vuln-ID|V-255951

ARST-ND-000340 - The Arista network device must be configured to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services.

800-53|CM-7b.

CAT|I

CCI|CCI-000382

Rule-ID|SV-255952r1043177_rule

STIG-ID|ARST-ND-000340

Vuln-ID|V-255952

ARST-ND-000350 - The Arista network device must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.

800-53|AC-2(7)(a)

800-53|AC-2a.

CCI|CCI-001358

CCI|CCI-002111

Rule-ID|SV-255953r1051115_rule

STIG-ID|ARST-ND-000350

Vuln-ID|V-255953

ARST-ND-000380 - The Arista network device must enforce a minimum 15-character password length.

800-53|IA-5(1)(a)

CCI|CCI-000205

CCI|CCI-004066

Rule-ID|SV-255954r1015710_rule

STIG-ID|ARST-ND-000380

Vuln-ID|V-255954

ARST-ND-000470 - The Arista network device must use FIPS 140-2 approved algorithms for authentication to a cryptographic module.

800-53|IA-7

CCI|CCI-000803

Rule-ID|SV-255955r961050_rule

STIG-ID|ARST-ND-000470

Vuln-ID|V-255955

ARST-ND-000490 - The Arista network device must terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after 10 minutes of inactivity except to fulfill documented and validated mission requirements.

800-53|SC-10

CCI|CCI-001133

Rule-ID|SV-255956r991784_rule

STIG-ID|ARST-ND-000490

Vuln-ID|V-255956

ARST-ND-000550 - If the Arista network device uses role-based access control, the network device must enforce organization-defined role-based access control policies over defined subjects and objects.

800-53|AC-3(7)

800-53|CM-5(1)

CCI|CCI-001813

CCI|CCI-002169

Rule-ID|SV-255957r987662_rule

STIG-ID|ARST-ND-000550

Vuln-ID|V-255957

ARST-ND-000600 - The Arista network device must be configured to synchronize internal system clocks using redundant authenticated time sources.

800-53|AU-8(2)

800-53|AU-8b.

800-53|IA-3(1)

CCI|CCI-001889

CCI|CCI-001890

CCI|CCI-001893

CCI|CCI-001967

CCI|CCI-004922

CCI|CCI-004923

CCI|CCI-004928

Rule-ID|SV-255958r1015711_rule

STIG-ID|ARST-ND-000600

Vuln-ID|V-255958

ARST-ND-000660 - The Arista network device must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC).

Rule-ID|SV-255959r961506_rule

STIG-ID|ARST-ND-000660

Vuln-ID|V-255959

ARST-ND-000690 - The Arista network devices must use FIPS-validated Keyed-Hash Message Authentication Code (HMAC) to protect the integrity of remote maintenance sessions.

800-53|IA-2(8)

800-53|MA-4(6)

CCI|CCI-001941

CCI|CCI-002890

Rule-ID|SV-255960r961554_rule

STIG-ID|ARST-ND-000690

Vuln-ID|V-255960

ARST-ND-000700 - The Arista network device must be configured to implement cryptographic mechanisms using a FIPS 140-2 approved algorithm to protect the confidentiality of remote maintenance sessions.

CCI|CCI-003123

Rule-ID|SV-255961r961557_rule

STIG-ID|ARST-ND-000700

Vuln-ID|V-255961

ARST-ND-000790 - The Arista network device must be configured to capture all DOD auditable events.

800-53|AU-3

800-53|AU-4

800-53|AU-5(2)

800-53|AU-12a.

CCI|CCI-000130

CCI|CCI-000131

CCI|CCI-000132

CCI|CCI-000133

CCI|CCI-000134

CCI|CCI-000169

CCI|CCI-001487

CCI|CCI-001849

CCI|CCI-001858

Rule-ID|SV-255962r960891_rule

STIG-ID|ARST-ND-000790

Vuln-ID|V-255962

ARST-ND-000810 - The network device must be configured to use an authentication server to authenticate users prior to granting administrative access.

800-53|CM-6(1)

CCI|CCI-000370

Rule-ID|SV-255963r961863_rule

STIG-ID|ARST-ND-000810

Vuln-ID|V-255963

ARST-ND-000820 - The network device must be configured to conduct backups of system level information contained in the information system when changes occur.

800-53|CP-9b.

CCI|CCI-000537

Rule-ID|SV-255964r961863_rule

STIG-ID|ARST-ND-000820

Vuln-ID|V-255964

ARST-ND-000840 - The Arista network device must obtain its public key certificates from an appropriate certificate policy through an approved service provider.

800-53|SC-17

CCI|CCI-001159

Rule-ID|SV-255965r961863_rule

STIG-ID|ARST-ND-000840

Vuln-ID|V-255965

ARST-ND-000850 - The Arista network Arista device must be configured to send log data to a central log server for the purpose of forwarding alerts to the administrators and the ISSO.

800-53|AU-4(1)

800-53|AU-9

CCI|CCI-000163

CCI|CCI-000164

CCI|CCI-001851

Rule-ID|SV-255966r961863_rule

STIG-ID|ARST-ND-000850

Vuln-ID|V-255966

ARST-ND-000860 - The Arista network device must be running an operating system release that is currently supported by the vendor.

Detections

Analytics

DISA Arista MLS EOS 4.X NDM STIG v2r2

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous