AMLS-NM-000100 - The Arista Multilayer Switch must have a local infrequently used account to be used as an account of last resort with full access to the network device.

800-53|CM-6b.

CAT|I

CCI|CCI-000366

Group-ID|V-60815

Rule-ID|SV-75271r1_rule

STIG-ID|AMLS-NM-000100

Vuln-ID|V-60815

AMLS-NM-000110 - The Arista Multilayer Switch account of last resort must have a password with a length of 15 characters.

800-53|IA-5(1)(a)

CAT|II

CCI|CCI-000205

Group-ID|V-60833

Rule-ID|SV-75289r1_rule

STIG-ID|AMLS-NM-000110

Vuln-ID|V-60833

AMLS-NM-000120 - The Arista Multilayer Switch must automatically audit account creation.

800-53|AC-2(4)

CCI|CCI-000018

Group-ID|V-60835

Rule-ID|SV-75291r1_rule

STIG-ID|AMLS-NM-000120

Vuln-ID|V-60835

AMLS-NM-000130 - The Arista Multilayer Switch must automatically audit account modification.

CCI|CCI-001403

Group-ID|V-60837

Rule-ID|SV-75293r1_rule

STIG-ID|AMLS-NM-000130

Vuln-ID|V-60837

AMLS-NM-000140 - The Arista Multilayer Switch must automatically audit account disabling actions.

CCI|CCI-001404

Group-ID|V-60839

Rule-ID|SV-75295r1_rule

STIG-ID|AMLS-NM-000140

Vuln-ID|V-60839

AMLS-NM-000150 - The Arista Multilayer Switch must automatically audit account removal actions.

CCI|CCI-001405

Group-ID|V-60841

Rule-ID|SV-75297r1_rule

STIG-ID|AMLS-NM-000150

Vuln-ID|V-60841

AMLS-NM-000160 - The Arista Multilayer Switch must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.

800-53|AC-8a.

CCI|CCI-000048

Group-ID|V-60843

Rule-ID|SV-75299r1_rule

STIG-ID|AMLS-NM-000160

Vuln-ID|V-60843

AMLS-NM-000170 - The Arista Multilayer Switch must protect against an individual (or process acting on behalf of an individual) falsely denying having performed organization-defined actions to be covered by non-repudiation.

800-53|AU-10

CAT|III

CCI|CCI-000166

Group-ID|V-60845

Rule-ID|SV-75301r1_rule

STIG-ID|AMLS-NM-000170

Vuln-ID|V-60845

AMLS-NM-000180 - The Arista Multilayer Switch must generate audit records when successful/unsuccessful attempts to access privileges occur.

800-53|AU-12c.

CCI|CCI-000172

Group-ID|V-60847

Rule-ID|SV-75303r1_rule

STIG-ID|AMLS-NM-000180

Vuln-ID|V-60847

AMLS-NM-000190 - The Arista Multilayer Switch must produce audit log records containing sufficient information to establish what type of event occurred.

800-53|AU-3

CCI|CCI-000130

Group-ID|V-60849

Rule-ID|SV-75305r1_rule

STIG-ID|AMLS-NM-000190

Vuln-ID|V-60849

AMLS-NM-000200 - The Arista Multilayer Switch must generate audit records containing the full-text recording of privileged commands.

800-53|AU-3(1)

CCI|CCI-000135

Group-ID|V-60851

Rule-ID|SV-75307r1_rule

STIG-ID|AMLS-NM-000200

Vuln-ID|V-60851

AMLS-NM-000210 - The Arista Multilayer Switch must be configured to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

800-53|CM-7b.

CCI|CCI-000382

Group-ID|V-60853

Rule-ID|SV-75309r1_rule

STIG-ID|AMLS-NM-000210

Vuln-ID|V-60853

AMLS-NM-000220 - The Arista Multilayer Switch must use multifactor authentication for local access to privileged accounts.

800-53|IA-2(3)

CCI|CCI-000767

Group-ID|V-60855

Rule-ID|SV-75311r1_rule

STIG-ID|AMLS-NM-000220

Vuln-ID|V-60855

AMLS-NM-000240 - The Arista Multilayer Switch must terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after 10 minutes of inactivity except to fulfill documented and validated mission requirements.

800-53|SC-10

CCI|CCI-001133

Group-ID|V-60857

Rule-ID|SV-75315r1_rule

STIG-ID|AMLS-NM-000240

Vuln-ID|V-60857

AMLS-NM-000250 - The Arista Multilayer Switch must reveal error messages only to authorized individuals (ISSO, ISSM, and SA) - ISSO, ISSM, and SA.

800-53|SI-11b.

CCI|CCI-001314

Group-ID|V-60859

Rule-ID|SV-75317r1_rule

STIG-ID|AMLS-NM-000250

Vuln-ID|V-60859

AMLS-NM-000260 - The Arista Multilayer Switch must activate a system alert message, send an alarm, and/or automatically shut down when a component failure is detected.

800-53|SI-13(4)(b)

CCI|CCI-001328

Group-ID|V-60861

Rule-ID|SV-75319r1_rule

STIG-ID|AMLS-NM-000260

Vuln-ID|V-60861

AMLS-NM-000270 - The Arista Multilayer Switch must synchronize internal information system clocks to the authoritative time source when the time difference is greater than the organization-defined time period.

800-53|AU-8(1)(b)

CCI|CCI-002046

Group-ID|V-60863

Rule-ID|SV-75321r1_rule

STIG-ID|AMLS-NM-000270

Vuln-ID|V-60863

AMLS-NM-000280 - The Arista Multilayer Switch must be configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources - NTP Server 1

800-53|AU-8(2)

CCI|CCI-001893

Group-ID|V-60865

Rule-ID|SV-75323r1_rule

STIG-ID|AMLS-NM-000280

Vuln-ID|V-60865

AMLS-NM-000280 - The Arista Multilayer Switch must be configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources - NTP Server 2

AMLS-NM-000290 - The Arista Multilayer Switch must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

800-53|AU-8b.

CCI|CCI-001890

Group-ID|V-60867

Rule-ID|SV-75325r1_rule

STIG-ID|AMLS-NM-000290

Vuln-ID|V-60867

AMLS-NM-000340 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the integrity of nonlocal maintenance and diagnostic communications - api http

800-53|MA-4(6)

CCI|CCI-002890

Group-ID|V-60869

Rule-ID|SV-75327r1_rule

STIG-ID|AMLS-NM-000340

Vuln-ID|V-60869

AMLS-NM-000340 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the integrity of nonlocal maintenance and diagnostic communications - api https

AMLS-NM-000340 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the integrity of nonlocal maintenance and diagnostic communications - telnet

AMLS-NM-000350 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the confidentiality of nonlocal maintenance and diagnostic communications - api http

CCI|CCI-003123

Group-ID|V-60871

Rule-ID|SV-75329r1_rule

STIG-ID|AMLS-NM-000350

Vuln-ID|V-60871

AMLS-NM-000350 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the confidentiality of nonlocal maintenance and diagnostic communications - api https

AMLS-NM-000350 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the confidentiality of nonlocal maintenance and diagnostic communications - telnet

AMLS-NM-000360 - The Arista Multilayer Switch must generate audit records for privileged activities or other system-level access - aaa commands

Group-ID|V-60873

Rule-ID|SV-75331r1_rule

STIG-ID|AMLS-NM-000360

Vuln-ID|V-60873

AMLS-NM-000360 - The Arista Multilayer Switch must generate audit records for privileged activities or other system-level access - aaa exec

AMLS-NM-000360 - The Arista Multilayer Switch must generate audit records for privileged activities or other system-level access - aaa system

AMLS-NM-000370 - The Arista Multilayer Switch must generate audit records showing starting and ending time for administrator access to the system - all logging

Group-ID|V-60875

Rule-ID|SV-75333r1_rule

STIG-ID|AMLS-NM-000370

Vuln-ID|V-60875

AMLS-NM-000370 - The Arista Multilayer Switch must generate audit records showing starting and ending time for administrator access to the system - trap logging

AMLS-NM-000380 - The Arista Multilayer Switch must generate audit records when concurrent logons from different workstations occur - show logging

Group-ID|V-60877

Rule-ID|SV-75335r1_rule

STIG-ID|AMLS-NM-000380

Vuln-ID|V-60877

AMLS-NM-000380 - The Arista Multilayer Switch must generate audit records when concurrent logons from different workstations occur - trap logging

AMLS-NM-000390 - The Arista Multilayer Switch must generate audit records for all account creations, modifications, disabling, and termination events - show logging

Group-ID|V-60879

Rule-ID|SV-75337r1_rule

STIG-ID|AMLS-NM-000390

Vuln-ID|V-60879

AMLS-NM-000390 - The Arista Multilayer Switch must generate audit records for all account creations, modifications, disabling, and termination events - trap logging

AMLS-NM-000400 - The Arista Multilayer Switch must, at a minimum, off-load audit records for interconnected systems in real time - logging host

800-53|AU-4(1)

CCI|CCI-001851

Group-ID|V-60881

Rule-ID|SV-75339r1_rule

STIG-ID|AMLS-NM-000400

Vuln-ID|V-60881

AMLS-NM-000400 - The Arista Multilayer Switch must, at a minimum, off-load audit records for interconnected systems in real time - trap logging

AMLS-NM-000420 - The Arista Multilayer Switch must protect the audit records of nonlocal accesses to privileged accounts and the execution of privileged functions - logging host

Group-ID|V-60883

Rule-ID|SV-75341r1_rule

STIG-ID|AMLS-NM-000420

Vuln-ID|V-60883

AMLS-NM-000420 - The Arista Multilayer Switch must protect the audit records of nonlocal accesses to privileged accounts and the execution of privileged functions - show user-account

AMLS-NM-000420 - The Arista Multilayer Switch must protect the audit records of nonlocal accesses to privileged accounts and the execution of privileged functions - trap logging

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa commands all default

800-53|CM-6(1)

CCI|CCI-000370

Group-ID|V-60885

Rule-ID|SV-75343r2_rule

STIG-ID|AMLS-NM-000430

Vuln-ID|V-60885

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa commands all start-stop

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa console

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa dot1x default group

Detections

Analytics

Revision 1.3

Jan 11, 2021

Informational Update

Miscellaneous