CISC-ND-000010 - The Cisco switch must be configured to limit the number of concurrent management sessions to an organization-defined number.

CAT|II

CCI|CCI-000054

Rule-ID|SV-220474r879511_rule

STIG-ID|CISC-ND-000010

STIG-Legacy|SV-110595

STIG-Legacy|V-101491

Vuln-ID|V-220474

CISC-ND-000090 - The Cisco switch must be configured to automatically audit account creation.

CCI|CCI-000018

Rule-ID|SV-220475r879525_rule

STIG-ID|CISC-ND-000090

STIG-Legacy|SV-110597

STIG-Legacy|V-101493

Vuln-ID|V-220475

CISC-ND-000100 - The Cisco switch must be configured to automatically audit account modification.

CCI|CCI-001403

Rule-ID|SV-220476r879526_rule

STIG-ID|CISC-ND-000100

STIG-Legacy|SV-110599

STIG-Legacy|V-101495

Vuln-ID|V-220476

CISC-ND-000110 - The Cisco switch must be configured to automatically audit account disabling actions.

CCI|CCI-001404

Rule-ID|SV-220477r879527_rule

STIG-ID|CISC-ND-000110

STIG-Legacy|SV-110601

STIG-Legacy|V-101497

Vuln-ID|V-220477

CISC-ND-000120 - The Cisco switch must be configured to automatically audit account removal actions.

CCI|CCI-001405

Rule-ID|SV-220478r879528_rule

STIG-ID|CISC-ND-000120

STIG-Legacy|SV-110603

STIG-Legacy|V-101499

Vuln-ID|V-220478

CISC-ND-000140 - The Cisco switch must be configured to enforce approved authorizations for controlling the flow of management information within the device based on control policies.

CCI|CCI-001368

Rule-ID|SV-220479r879533_rule

STIG-ID|CISC-ND-000140

STIG-Legacy|SV-110605

STIG-Legacy|V-101501

Vuln-ID|V-220479

CISC-ND-000150 - The Cisco switch must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must disconnect the session.

CCI|CCI-000044

Rule-ID|SV-220480r879546_rule

STIG-ID|CISC-ND-000150

STIG-Legacy|SV-110607

STIG-Legacy|V-101503

Vuln-ID|V-220480

CISC-ND-000160 - The Cisco switch must be configured to display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.

CCI|CCI-000048

Rule-ID|SV-220481r879547_rule

STIG-ID|CISC-ND-000160

STIG-Legacy|SV-110609

STIG-Legacy|V-101505

Vuln-ID|V-220481

CISC-ND-000210 - The Cisco switch must be configured to protect against an individual falsely denying having performed organization-defined actions to be covered by non-repudiation.

CCI|CCI-000166

Rule-ID|SV-220482r879554_rule

STIG-ID|CISC-ND-000210

STIG-Legacy|SV-110611

STIG-Legacy|V-101507

Vuln-ID|V-220482

CISC-ND-000290 - The Cisco switch must produce audit records containing information to establish where the events occurred.

CCI|CCI-000132

Rule-ID|SV-220484r879565_rule

STIG-ID|CISC-ND-000290

STIG-Legacy|SV-110617

STIG-Legacy|V-101513

Vuln-ID|V-220484

CISC-ND-000330 - The Cisco switch must be configured to generate audit records containing the full-text recording of privileged commands.

CCI|CCI-000135

Rule-ID|SV-220485r879569_rule

STIG-ID|CISC-ND-000330

STIG-Legacy|SV-110619

STIG-Legacy|V-101515

Vuln-ID|V-220485

CISC-ND-000470 - The Cisco switch must be configured to prohibit the use of all unnecessary and nonsecure functions and services.

CAT|I

CCI|CCI-000382

Rule-ID|SV-220486r879588_rule

STIG-ID|CISC-ND-000470

STIG-Legacy|SV-110621

STIG-Legacy|V-101517

Vuln-ID|V-220486

CISC-ND-000490 - The Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.

CCI|CCI-001358

CCI|CCI-002111

Rule-ID|SV-220487r879589_rule

STIG-ID|CISC-ND-000490

STIG-Legacy|SV-110623

STIG-Legacy|V-101519

Vuln-ID|V-220487

CISC-ND-000530 - The Cisco switch must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts.

CCI|CCI-001941

Rule-ID|SV-220488r929031_rule

STIG-ID|CISC-ND-000530

STIG-Legacy|SV-110625

STIG-Legacy|V-101521

Vuln-ID|V-220488

CISC-ND-000570 - The Cisco switch must be configured to enforce password complexity by requiring that at least one upper-case character be used.

CCI|CCI-000192

Rule-ID|SV-220489r879603_rule

STIG-ID|CISC-ND-000570

STIG-Legacy|SV-110627

STIG-Legacy|V-101523

Vuln-ID|V-220489

CISC-ND-000580 - The Cisco switch must be configured to enforce password complexity by requiring that at least one lower-case character be used.

CCI|CCI-000193

Rule-ID|SV-220490r879604_rule

STIG-ID|CISC-ND-000580

STIG-Legacy|SV-110629

STIG-Legacy|V-101525

Vuln-ID|V-220490

CISC-ND-000590 - The Cisco switch must be configured to enforce password complexity by requiring that at least one numeric character be used.

CCI|CCI-000194

Rule-ID|SV-220491r879605_rule

STIG-ID|CISC-ND-000590

STIG-Legacy|SV-110631

STIG-Legacy|V-101527

Vuln-ID|V-220491

CISC-ND-000600 - The Cisco switch must be configured to enforce password complexity by requiring that at least one special character be used.

CCI|CCI-001619

Rule-ID|SV-220492r879606_rule

STIG-ID|CISC-ND-000600

STIG-Legacy|SV-110633

STIG-Legacy|V-101529

Vuln-ID|V-220492

CISC-ND-000720 - The Cisco switch must be configured to terminate all network connections associated with device management after five minutes of inactivity.

CCI|CCI-001133

Rule-ID|SV-220493r916342_rule

STIG-ID|CISC-ND-000720

STIG-Legacy|SV-110635

STIG-Legacy|V-101531

Vuln-ID|V-220493

CISC-ND-000880 - The Cisco switch must be configured to automatically audit account enabling actions.

CCI|CCI-002130

Rule-ID|SV-220494r879696_rule

STIG-ID|CISC-ND-000880

STIG-Legacy|SV-110637

STIG-Legacy|V-101533

Vuln-ID|V-220494

CISC-ND-000940 - The Cisco switch must be configured to audit the execution of privileged functions.

CCI|CCI-002234

Rule-ID|SV-220495r879720_rule

STIG-ID|CISC-ND-000940

STIG-Legacy|SV-110639

STIG-Legacy|V-101535

Vuln-ID|V-220495

CISC-ND-000980 - The Cisco switch must be configured to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.

CCI|CCI-001849

Rule-ID|SV-220496r879730_rule

STIG-ID|CISC-ND-000980

STIG-Legacy|SV-110641

STIG-Legacy|V-101537

Vuln-ID|V-220496

CISC-ND-001000 - The Cisco switch must be configured to generate an alert for all audit failure events.

CCI|CCI-001858

Rule-ID|SV-220497r879733_rule

STIG-ID|CISC-ND-001000

STIG-Legacy|SV-110643

STIG-Legacy|V-101539

Vuln-ID|V-220497

CISC-ND-001030 - The Cisco switch must be configured to synchronize its clock with the primary and secondary time sources using redundant authoritative time sources.

CCI|CCI-000366

CCI|CCI-001893

Rule-ID|SV-220498r879746_rule

STIG-ID|CISC-ND-001030

STIG-Legacy|SV-110645

STIG-Legacy|V-101541

Vuln-ID|V-220498

CISC-ND-001050 - The Cisco switch must be configured to record time stamps for log records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

CCI|CCI-001890

Rule-ID|SV-220499r879747_rule

STIG-ID|CISC-ND-001050

STIG-Legacy|SV-110647

STIG-Legacy|V-101543

Vuln-ID|V-220499

CISC-ND-001130 - The Cisco switch must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC) - HMAC

CCI|CCI-001967

Rule-ID|SV-220500r879768_rule

STIG-ID|CISC-ND-001130

STIG-Legacy|SV-110649

STIG-Legacy|V-101545

Vuln-ID|V-220500

CISC-ND-001140 - The Cisco switch must be configured to encrypt SNMP messages using a FIPS 140-2 approved algorithm.

CCI|CCI-000068

Rule-ID|SV-220501r879768_rule

STIG-ID|CISC-ND-001140

STIG-Legacy|SV-110651

STIG-Legacy|V-101547

Vuln-ID|V-220501

CISC-ND-001150 - The Cisco switch must be configured to authenticate Network Time Protocol (NTP) sources using authentication that is cryptographically based - NTP sources using authentication that is cryptographically based

Rule-ID|SV-220502r879768_rule

STIG-ID|CISC-ND-001150

STIG-Legacy|SV-110653

STIG-Legacy|V-101549

Vuln-ID|V-220502

CISC-ND-001200 - The Cisco switch must be configured to use FIPS-validated Keyed-Hash Message Authentication Code (HMAC) to protect the integrity of remote maintenance sessions.

CCI|CCI-002890

Detections

Analytics

DISA STIG Cisco NX-OS Switch NDM v2r6

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.1

Miscellaneous