CISC-ND-000010 - The Cisco router must be configured to limit the number of concurrent management sessions to an organization-defined number.

800-53|AC-10

CAT|II

CCI|CCI-000054

Rule-ID|SV-215662r1192908_rule

STIG-ID|CISC-ND-000010

STIG-Legacy|SV-105145

STIG-Legacy|V-96007

Vuln-ID|V-215662

CISC-ND-000140 - The Cisco router must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies.

800-53|AC-4

CCI|CCI-001368

CCI|CCI-004192

Rule-ID|SV-215667r1137875_rule

STIG-ID|CISC-ND-000140

STIG-Legacy|SV-105161

STIG-Legacy|V-96023

Vuln-ID|V-215667

CISC-ND-000150 - The Cisco router must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must lock out the user account from accessing the device for 15 minutes.

800-53|AC-7a.

CCI|CCI-000044

Rule-ID|SV-215668r960840_rule

STIG-ID|CISC-ND-000150

STIG-Legacy|SV-105163

STIG-Legacy|V-96025

Vuln-ID|V-215668

CISC-ND-000160 - The Cisco router must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.

800-53|AC-8a.

CCI|CCI-000048

Rule-ID|SV-215669r960843_rule

STIG-ID|CISC-ND-000160

STIG-Legacy|SV-105165

STIG-Legacy|V-96027

Vuln-ID|V-215669

CISC-ND-000210 - The Cisco device must be configured to audit all administrator activity.

800-53|AC-2(4)

800-53|AC-6(9)

800-53|AU-3(1)

800-53|AU-10

800-53|AU-12c.

CCI|CCI-000018

CCI|CCI-000135

CCI|CCI-000166

CCI|CCI-000172

CCI|CCI-001403

CCI|CCI-001404

CCI|CCI-001405

CCI|CCI-002130

CCI|CCI-002234

Rule-ID|SV-215670r1205833_rule

STIG-ID|CISC-ND-000210

STIG-Legacy|SV-105173

STIG-Legacy|V-96035

Vuln-ID|V-215670

CISC-ND-000280 - The Cisco router must produce audit records containing information to establish when (date and time) the events occurred.

800-53|AU-3

CCI|CCI-000131

Rule-ID|SV-215672r960894_rule

STIG-ID|CISC-ND-000280

STIG-Legacy|SV-105179

STIG-Legacy|V-96041

Vuln-ID|V-215672

CISC-ND-000290 - The Cisco router must produce audit records containing information to establish where the events occurred.

CCI|CCI-000132

Rule-ID|SV-215673r960897_rule

STIG-ID|CISC-ND-000290

STIG-Legacy|SV-105181

STIG-Legacy|V-96043

Vuln-ID|V-215673

CISC-ND-000380 - The Cisco router must be configured to protect audit information from unauthorized modification.

800-53|AU-9

CCI|CCI-000163

Rule-ID|SV-215675r960933_rule

STIG-ID|CISC-ND-000380

STIG-Legacy|SV-105187

STIG-Legacy|V-96049

Vuln-ID|V-215675

CISC-ND-000390 - The Cisco router must be configured to protect audit information from unauthorized deletion.

CCI|CCI-000164

Rule-ID|SV-215676r960936_rule

STIG-ID|CISC-ND-000390

STIG-Legacy|SV-105189

STIG-Legacy|V-96051

Vuln-ID|V-215676

CISC-ND-000460 - The Cisco router must be configured to limit privileges to change the software resident within software libraries.

800-53|CM-5(6)

CCI|CCI-001499

Rule-ID|SV-215677r960960_rule

STIG-ID|CISC-ND-000460

STIG-Legacy|SV-105193

STIG-Legacy|V-96055

Vuln-ID|V-215677

CISC-ND-000470 - The Cisco router must be configured to prohibit the use of all unnecessary and nonsecure functions and services.

800-53|CM-7b.

CAT|I

CCI|CCI-000382

Rule-ID|SV-215678r1043177_rule

STIG-ID|CISC-ND-000470

STIG-Legacy|SV-105195

STIG-Legacy|V-96057

Vuln-ID|V-215678

CISC-ND-000490 - The Cisco router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.

800-53|AC-2(7)(a)

800-53|AC-2a.

CCI|CCI-001358

CCI|CCI-002111

Rule-ID|SV-215679r1051115_rule

STIG-ID|CISC-ND-000490

STIG-Legacy|SV-105199

STIG-Legacy|V-96061

Vuln-ID|V-215679

CISC-ND-000550 - The Cisco router must be configured to enforce a minimum 15-character password length.

800-53|IA-5(1)(a)

CCI|CCI-004066

Rule-ID|SV-215681r991820_rule

STIG-ID|CISC-ND-000550

STIG-Legacy|SV-105209

STIG-Legacy|V-96071

Vuln-ID|V-215681

CISC-ND-000570 - The Cisco router must be configured to enforce password complexity by requiring that at least one uppercase character be used.

Rule-ID|SV-215682r991823_rule

STIG-ID|CISC-ND-000570

STIG-Legacy|SV-105211

STIG-Legacy|V-96073

Vuln-ID|V-215682

CISC-ND-000580 - The Cisco router must be configured to enforce password complexity by requiring that at least one lowercase character be used.

Rule-ID|SV-215683r991826_rule

STIG-ID|CISC-ND-000580

STIG-Legacy|SV-105213

STIG-Legacy|V-96075

Vuln-ID|V-215683

CISC-ND-000590 - The Cisco router must be configured to enforce password complexity by requiring that at least one numeric character be used.

Rule-ID|SV-215684r991827_rule

STIG-ID|CISC-ND-000590

STIG-Legacy|SV-105215

STIG-Legacy|V-96077

Vuln-ID|V-215684

CISC-ND-000600 - The Cisco router must be configured to enforce password complexity by requiring that at least one special character be used.

Rule-ID|SV-215685r991828_rule

STIG-ID|CISC-ND-000600

STIG-Legacy|SV-105217

STIG-Legacy|V-96079

Vuln-ID|V-215685

CISC-ND-000610 - The Cisco router must be configured to require that when a password is changed, the characters are changed in at least eight of the positions within the password.

Rule-ID|SV-215686r1043189_rule

STIG-ID|CISC-ND-000610

STIG-Legacy|SV-105219

STIG-Legacy|V-96081

Vuln-ID|V-215686

CISC-ND-000620 - The Cisco router must only store cryptographic representations of passwords.

800-53|IA-5(1)(d)

CCI|CCI-004062

CCI|CCI-004910

Rule-ID|SV-215687r991830_rule

STIG-ID|CISC-ND-000620

STIG-Legacy|SV-105221

STIG-Legacy|V-96083

Vuln-ID|V-215687

CISC-ND-000720 - The Cisco router must be configured to terminate all network connections associated with device management after five minutes of inactivity.

800-53|SC-10

CCI|CCI-001133

Rule-ID|SV-215688r961068_rule

STIG-ID|CISC-ND-000720

STIG-Legacy|SV-105227

STIG-Legacy|V-96089

Vuln-ID|V-215688

CISC-ND-000980 - The Cisco router must be configured to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

800-53|AU-4

CCI|CCI-001849

Rule-ID|SV-215691r961392_rule

STIG-ID|CISC-ND-000980

STIG-Legacy|SV-105253

STIG-Legacy|V-96115

Vuln-ID|V-215691

CISC-ND-001000 - The Cisco router must be configured to generate an alert for all audit failure events.

800-53|AU-5(2)

CCI|CCI-001858

CCI|CCI-003831

Rule-ID|SV-215692r991831_rule

STIG-ID|CISC-ND-001000

STIG-Legacy|SV-105257

STIG-Legacy|V-96119

Vuln-ID|V-215692

CISC-ND-001030 - The Cisco router must be configured to synchronize its clock with the primary and secondary time sources using redundant authoritative time sources.

800-53|AU-8b.

CCI|CCI-001889

CCI|CCI-001890

CCI|CCI-004922

CCI|CCI-004923

CCI|CCI-004928

Rule-ID|SV-215693r991832_rule

STIG-ID|CISC-ND-001030

STIG-Legacy|SV-105259

STIG-Legacy|V-96121

Vuln-ID|V-215693

CISC-ND-001130 - The Cisco router must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC).

Detections

Analytics

DISA Cisco IOS Router NDM STIG v3r8

Audit Details

File Details

Audit Changelog

Revision 1.1

Functional Update

Miscellaneous