AMLS-NM-000100 - The Arista Multilayer Switch must have a local infrequently used account to be used as an account of last resort with full access to the network device.

800-53|CM-6b.

CAT|I

CCI|CCI-000366

Group-ID|V-60815

Rule-ID|SV-75271r1_rule

STIG-ID|AMLS-NM-000100

Vuln-ID|V-60815

AMLS-NM-000110 - The Arista Multilayer Switch account of last resort must have a password with a length of 15 characters.

800-53|IA-5(1)(a)

CAT|II

CCI|CCI-000205

Group-ID|V-60833

Rule-ID|SV-75289r1_rule

STIG-ID|AMLS-NM-000110

Vuln-ID|V-60833

AMLS-NM-000120 - The Arista Multilayer Switch must automatically audit account creation.

800-53|AC-2(4)

CCI|CCI-000018

Group-ID|V-60835

Rule-ID|SV-75291r1_rule

STIG-ID|AMLS-NM-000120

Vuln-ID|V-60835

AMLS-NM-000130 - The Arista Multilayer Switch must automatically audit account modification.

CCI|CCI-001403

Group-ID|V-60837

Rule-ID|SV-75293r1_rule

STIG-ID|AMLS-NM-000130

Vuln-ID|V-60837

AMLS-NM-000140 - The Arista Multilayer Switch must automatically audit account disabling actions.

CCI|CCI-001404

Group-ID|V-60839

Rule-ID|SV-75295r1_rule

STIG-ID|AMLS-NM-000140

Vuln-ID|V-60839

AMLS-NM-000150 - The Arista Multilayer Switch must automatically audit account removal actions.

CCI|CCI-001405

Group-ID|V-60841

Rule-ID|SV-75297r1_rule

STIG-ID|AMLS-NM-000150

Vuln-ID|V-60841

AMLS-NM-000160 - The Arista Multilayer Switch must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.

800-53|AC-8a.

CCI|CCI-000048

Group-ID|V-60843

Rule-ID|SV-75299r1_rule

STIG-ID|AMLS-NM-000160

Vuln-ID|V-60843

AMLS-NM-000170 - The Arista Multilayer Switch must protect against an individual (or process acting on behalf of an individual) falsely denying having performed organization-defined actions to be covered by non-repudiation.

800-53|AU-10

CAT|III

CCI|CCI-000166

Group-ID|V-60845

Rule-ID|SV-75301r1_rule

STIG-ID|AMLS-NM-000170

Vuln-ID|V-60845

AMLS-NM-000180 - The Arista Multilayer Switch must generate audit records when successful/unsuccessful attempts to access privileges occur.

800-53|AU-12c.

CCI|CCI-000172

Group-ID|V-60847

Rule-ID|SV-75303r1_rule

STIG-ID|AMLS-NM-000180

Vuln-ID|V-60847

AMLS-NM-000190 - The Arista Multilayer Switch must produce audit log records containing sufficient information to establish what type of event occurred.

800-53|AU-3

CCI|CCI-000130

Group-ID|V-60849

Rule-ID|SV-75305r1_rule

STIG-ID|AMLS-NM-000190

Vuln-ID|V-60849

AMLS-NM-000200 - The Arista Multilayer Switch must generate audit records containing the full-text recording of privileged commands.

800-53|AU-3(1)

CCI|CCI-000135

Group-ID|V-60851

Rule-ID|SV-75307r1_rule

STIG-ID|AMLS-NM-000200

Vuln-ID|V-60851

AMLS-NM-000210 - The Arista Multilayer Switch must be configured to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

800-53|CM-7b.

CCI|CCI-000382

Group-ID|V-60853

Rule-ID|SV-75309r1_rule

STIG-ID|AMLS-NM-000210

Vuln-ID|V-60853

AMLS-NM-000220 - The Arista Multilayer Switch must use multifactor authentication for local access to privileged accounts.

800-53|IA-2(3)

CCI|CCI-000767

Group-ID|V-60855

Rule-ID|SV-75311r1_rule

STIG-ID|AMLS-NM-000220

Vuln-ID|V-60855

AMLS-NM-000240 - The Arista Multilayer Switch must terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after 10 minutes of inactivity except to fulfill documented and validated mission requirements.

800-53|SC-10

CCI|CCI-001133

Group-ID|V-60857

Rule-ID|SV-75315r1_rule

STIG-ID|AMLS-NM-000240

Vuln-ID|V-60857

AMLS-NM-000250 - The Arista Multilayer Switch must reveal error messages only to authorized individuals (ISSO, ISSM, and SA) - ISSO, ISSM, and SA.

800-53|SI-11b.

CCI|CCI-001314

Group-ID|V-60859

Rule-ID|SV-75317r1_rule

STIG-ID|AMLS-NM-000250

Vuln-ID|V-60859

AMLS-NM-000260 - The Arista Multilayer Switch must activate a system alert message, send an alarm, and/or automatically shut down when a component failure is detected.

800-53|SI-13(4)(b)

CCI|CCI-001328

Group-ID|V-60861

Rule-ID|SV-75319r1_rule

STIG-ID|AMLS-NM-000260

Vuln-ID|V-60861

AMLS-NM-000270 - The Arista Multilayer Switch must synchronize internal information system clocks to the authoritative time source when the time difference is greater than the organization-defined time period.

800-53|AU-8(1)(b)

CCI|CCI-002046

Group-ID|V-60863

Rule-ID|SV-75321r1_rule

STIG-ID|AMLS-NM-000270

Vuln-ID|V-60863

AMLS-NM-000280 - The Arista Multilayer Switch must be configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources - NTP Server 1

800-53|AU-8(2)

CCI|CCI-001893

Group-ID|V-60865

Rule-ID|SV-75323r1_rule

STIG-ID|AMLS-NM-000280

Vuln-ID|V-60865

AMLS-NM-000280 - The Arista Multilayer Switch must be configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources - NTP Server 2

AMLS-NM-000290 - The Arista Multilayer Switch must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

800-53|AU-8b.

CCI|CCI-001890

Group-ID|V-60867

Rule-ID|SV-75325r1_rule

STIG-ID|AMLS-NM-000290

Vuln-ID|V-60867

AMLS-NM-000340 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the integrity of nonlocal maintenance and diagnostic communications - api http

800-53|MA-4(6)

CCI|CCI-002890

Group-ID|V-60869

Rule-ID|SV-75327r1_rule

STIG-ID|AMLS-NM-000340

Vuln-ID|V-60869

AMLS-NM-000340 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the integrity of nonlocal maintenance and diagnostic communications - api https

AMLS-NM-000340 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the integrity of nonlocal maintenance and diagnostic communications - telnet

AMLS-NM-000350 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the confidentiality of nonlocal maintenance and diagnostic communications - api http

CCI|CCI-003123

Group-ID|V-60871

Rule-ID|SV-75329r1_rule

STIG-ID|AMLS-NM-000350

Vuln-ID|V-60871

AMLS-NM-000350 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the confidentiality of nonlocal maintenance and diagnostic communications - api https

AMLS-NM-000350 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the confidentiality of nonlocal maintenance and diagnostic communications - telnet

AMLS-NM-000360 - The Arista Multilayer Switch must generate audit records for privileged activities or other system-level access - aaa commands

Group-ID|V-60873

Rule-ID|SV-75331r1_rule

STIG-ID|AMLS-NM-000360

Vuln-ID|V-60873

AMLS-NM-000360 - The Arista Multilayer Switch must generate audit records for privileged activities or other system-level access - aaa exec

AMLS-NM-000360 - The Arista Multilayer Switch must generate audit records for privileged activities or other system-level access - aaa system

AMLS-NM-000370 - The Arista Multilayer Switch must generate audit records showing starting and ending time for administrator access to the system - all logging

Group-ID|V-60875

Rule-ID|SV-75333r1_rule

STIG-ID|AMLS-NM-000370

Vuln-ID|V-60875

AMLS-NM-000370 - The Arista Multilayer Switch must generate audit records showing starting and ending time for administrator access to the system - trap logging

AMLS-NM-000380 - The Arista Multilayer Switch must generate audit records when concurrent logons from different workstations occur - show logging

Group-ID|V-60877

Rule-ID|SV-75335r1_rule

STIG-ID|AMLS-NM-000380

Vuln-ID|V-60877

AMLS-NM-000380 - The Arista Multilayer Switch must generate audit records when concurrent logons from different workstations occur - trap logging

AMLS-NM-000390 - The Arista Multilayer Switch must generate audit records for all account creations, modifications, disabling, and termination events - show logging

Group-ID|V-60879

Rule-ID|SV-75337r1_rule

STIG-ID|AMLS-NM-000390

Vuln-ID|V-60879

AMLS-NM-000390 - The Arista Multilayer Switch must generate audit records for all account creations, modifications, disabling, and termination events - trap logging

AMLS-NM-000400 - The Arista Multilayer Switch must, at a minimum, off-load audit records for interconnected systems in real time - logging host

800-53|AU-4(1)

CCI|CCI-001851

Group-ID|V-60881

Rule-ID|SV-75339r1_rule

STIG-ID|AMLS-NM-000400

Vuln-ID|V-60881

AMLS-NM-000400 - The Arista Multilayer Switch must, at a minimum, off-load audit records for interconnected systems in real time - trap logging

AMLS-NM-000420 - The Arista Multilayer Switch must protect the audit records of nonlocal accesses to privileged accounts and the execution of privileged functions - logging host

Group-ID|V-60883

Rule-ID|SV-75341r1_rule

STIG-ID|AMLS-NM-000420

Vuln-ID|V-60883

AMLS-NM-000420 - The Arista Multilayer Switch must protect the audit records of nonlocal accesses to privileged accounts and the execution of privileged functions - show user-account

AMLS-NM-000420 - The Arista Multilayer Switch must protect the audit records of nonlocal accesses to privileged accounts and the execution of privileged functions - trap logging

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa commands all default

800-53|CM-6(1)

CCI|CCI-000370

Group-ID|V-60885

Rule-ID|SV-75343r2_rule

STIG-ID|AMLS-NM-000430

Vuln-ID|V-60885

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa commands all start-stop

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa console

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa dot1x default group

Detections

Analytics

DISA STIG Arista MLS DCS-7000 Series NDM v1r3

Audit Details

File Details

Audit Changelog

Revision 1.8

Miscellaneous

Revision 1.7

Miscellaneous

Revision 1.6

Miscellaneous

Revision 1.5

Miscellaneous

Revision 1.4

Miscellaneous

Revision 1.3

Informational Update

Miscellaneous

Revision 1.2

Miscellaneous

Revision 1.1

Miscellaneous

Detections

Analytics

DISA STIG Arista MLS DCS-7000 Series NDM v1r3 Download File

Audit Details

File Details

Audit Changelog

Miscellaneous

Miscellaneous

Miscellaneous

Miscellaneous

Miscellaneous

Informational Update

Miscellaneous

Miscellaneous

Miscellaneous

DISA STIG Arista MLS DCS-7000 Series NDM v1r3