OS10-NDM-000010 - The Dell OS10 Switch must limit the number of concurrent sessions to an organization-defined number for each administrator account and/or administrator account type.

800-53|AC-10

CAT|II

CCI|CCI-000054

Rule-ID|SV-269768r1051689_rule

STIG-ID|OS10-NDM-000010

Vuln-ID|V-269768

OS10-NDM-000100 - The Dell OS10 Switch must be configured to assign appropriate user roles or access levels to authenticated users.

800-53|AC-3

CAT|I

CCI|CCI-000213

Rule-ID|SV-269769r1052474_rule

STIG-ID|OS10-NDM-000100

Vuln-ID|V-269769

OS10-NDM-000110 - The Dell OS10 Switch must enforce approved authorizations for controlling the flow of management information within the network device based on information flow control policies.

800-53|AC-4

CCI|CCI-001368

CCI|CCI-004192

Rule-ID|SV-269770r1051695_rule

STIG-ID|OS10-NDM-000110

Vuln-ID|V-269770

OS10-NDM-000120 - The Dell OS10 Switch must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must block any login attempt for 15 minutes.

800-53|AC-7a.

CCI|CCI-000044

Rule-ID|SV-269771r1051698_rule

STIG-ID|OS10-NDM-000120

Vuln-ID|V-269771

OS10-NDM-000130 - The Dell OS10 device must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the device.

800-53|AC-8a.

800-53|AC-8b.

CCI|CCI-000048

CCI|CCI-000050

Rule-ID|SV-269772r1051701_rule

STIG-ID|OS10-NDM-000130

Vuln-ID|V-269772

OS10-NDM-000150 - The Dell OS10 Switch must protect against an individual (or process acting on behalf of an individual) falsely denying having performed organization-defined actions to be covered by nonrepudiation.

800-53|AU-10

CCI|CCI-000166

Rule-ID|SV-269773r1051704_rule

STIG-ID|OS10-NDM-000150

Vuln-ID|V-269773

OS10-NDM-000180 - The Dell OS10 Switch must initiate session auditing upon startup.

800-53|AC-2(4)

800-53|AC-6(9)

800-53|AU-3

800-53|AU-3(1)

800-53|AU-12c.

800-53|AU-14(1)

CCI|CCI-000018

CCI|CCI-000130

CCI|CCI-000131

CCI|CCI-000132

CCI|CCI-000133

CCI|CCI-000134

CCI|CCI-000135

CCI|CCI-000172

CCI|CCI-001403

CCI|CCI-001404

CCI|CCI-001405

CCI|CCI-001464

CCI|CCI-001487

CCI|CCI-002130

CCI|CCI-002234

CCI|CCI-003938

Rule-ID|SV-269774r1051707_rule

STIG-ID|OS10-NDM-000180

Vuln-ID|V-269774

OS10-NDM-000320 - The Dell OS10 Switch must prevent the installation of patches, service packs, or application components without verification the software component has been digitally signed using a certificate that is recognized and approved by the organization.

800-53|CM-5(3)

CCI|CCI-003992

Rule-ID|SV-269775r1051710_rule

STIG-ID|OS10-NDM-000320

Vuln-ID|V-269775

OS10-NDM-000340 - The Dell OS10 Switch must be configured to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services.

800-53|CM-7b.

CCI|CCI-000382

Rule-ID|SV-269776r1051713_rule

STIG-ID|OS10-NDM-000340

Vuln-ID|V-269776

OS10-NDM-000350 - The Dell OS10 Switch must be configured to disable the Bash shell.

Rule-ID|SV-269777r1051716_rule

STIG-ID|OS10-NDM-000350

Vuln-ID|V-269777

OS10-NDM-000360 - The Dell OS10 Switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.

800-53|AC-2(7)(a)

800-53|AC-2a.

CCI|CCI-001358

CCI|CCI-002111

Rule-ID|SV-269778r1051719_rule

STIG-ID|OS10-NDM-000360

Vuln-ID|V-269778

OS10-NDM-000370 - The Dell OS10 Switch must be configured to use DOD PKI as multifactor authentication (MFA) for interactive logins.

800-53|IA-2(1)

CCI|CCI-000765

CCI|CCI-004046

CCI|CCI-004047

Rule-ID|SV-269779r1051722_rule

STIG-ID|OS10-NDM-000370

Vuln-ID|V-269779

OS10-NDM-000390 - The Dell OS10 Switch must implement replay-resistant authentication mechanisms for network access to privileged accounts.

800-53|IA-2(8)

CCI|CCI-001941

Rule-ID|SV-269780r1051725_rule

STIG-ID|OS10-NDM-000390

Vuln-ID|V-269780

OS10-NDM-000400 - The Dell OS10 Switch must enforce a minimum 15-character password length.

800-53|IA-5(1)(a)

CCI|CCI-004066

Rule-ID|SV-269781r1051728_rule

STIG-ID|OS10-NDM-000400

Vuln-ID|V-269781

OS10-NDM-000410 - The Dell OS10 Switch must enforce password complexity by requiring that at least one uppercase character be used.

Rule-ID|SV-269782r1051731_rule

STIG-ID|OS10-NDM-000410

Vuln-ID|V-269782

OS10-NDM-000420 - The Dell OS10 Switch must enforce password complexity by requiring that at least one lowercase character be used.

Rule-ID|SV-269783r1051734_rule

STIG-ID|OS10-NDM-000420

Vuln-ID|V-269783

OS10-NDM-000430 - The Dell OS10 Switch must enforce password complexity by requiring that at least one numeric character be used.

Rule-ID|SV-269784r1051737_rule

STIG-ID|OS10-NDM-000430

Vuln-ID|V-269784

OS10-NDM-000440 - The Dell OS10 Switch must enforce password complexity by requiring that at least one special character be used.

Rule-ID|SV-269785r1051740_rule

STIG-ID|OS10-NDM-000440

Vuln-ID|V-269785

OS10-NDM-000480 - The Dell OS10 Switch must be configured to use DOD-approved OCSP responders or CRLs to validate certificates used for PKI-based authentication.

800-53|IA-5(2)(a)

CCI|CCI-000185

Rule-ID|SV-269786r1052487_rule

STIG-ID|OS10-NDM-000480

Vuln-ID|V-269786

OS10-NDM-000490 - The Dell OS10 Switch, for PKI-based authentication, must be configured to map validated certificates to unique user accounts.

800-53|IA-2

800-53|IA-5(2)(c)

CCI|CCI-000187

CCI|CCI-000764

Rule-ID|SV-269787r1052488_rule

STIG-ID|OS10-NDM-000490

Vuln-ID|V-269787

OS10-NDM-000510 - The Dell OS10 Switch must use FIPS 140-2 approved algorithms for authentication to a cryptographic module.

800-53|IA-5(1)(c)

800-53|IA-7

CCI|CCI-000197

CCI|CCI-000803

Rule-ID|SV-269788r1051749_rule

STIG-ID|OS10-NDM-000510

Vuln-ID|V-269788

OS10-NDM-000530 - The Dell OS10 Switch must terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after five minutes of inactivity except to fulfill documented and validated mission requirements.

800-53|CM-6(1)

800-53|MA-4e.

800-53|SC-10

CCI|CCI-000370

CCI|CCI-000879

CCI|CCI-001133

Rule-ID|SV-269789r1051752_rule

STIG-ID|OS10-NDM-000530

Vuln-ID|V-269789

OS10-NDM-000640 - The Dell OS10 Switch must prevent nonprivileged users from executing privileged functions to include disabling, circumventing, or altering implemented security safeguards/countermeasures.

800-53|AC-3(7)

800-53|AC-6(10)

800-53|CM-6b.

CCI|CCI-000366

CCI|CCI-002169

CCI|CCI-002235

Rule-ID|SV-269790r1051755_rule

STIG-ID|OS10-NDM-000640

Vuln-ID|V-269790

OS10-NDM-000670 - The Dell OS10 Switch must generate an immediate real-time alert of all audit failure events requiring real-time alerts.

800-53|AU-5(2)

CCI|CCI-001858

CCI|CCI-003831

Rule-ID|SV-269791r1051758_rule

STIG-ID|OS10-NDM-000670

Vuln-ID|V-269791

OS10-NDM-000680 - The Dell OS10 Switch must be configured to synchronize internal information system clocks using redundant authoritative time sources.

800-53|AU-8(1)

CCI|CCI-004922

CCI|CCI-004923

Rule-ID|SV-270644r1052341_rule

STIG-ID|OS10-NDM-000680

Vuln-ID|V-270644

OS10-NDM-000740 - The Dell OS10 Switch must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC).

800-53|IA-3(1)

CCI|CCI-001967

Rule-ID|SV-269793r1052419_rule

STIG-ID|OS10-NDM-000740

Vuln-ID|V-269793

OS10-NDM-000750 - The Dell OS10 Switch must authenticate Network Time Protocol (NTP) sources using authentication that is cryptographically based.

Rule-ID|SV-269794r1051767_rule

STIG-ID|OS10-NDM-000750

Vuln-ID|V-269794

OS10-NDM-000760 - The Dell OS10 Switch must prohibit the use of cached authenticators after an organization-defined time period.

800-53|IA-5(13)

CCI|CCI-002007

Rule-ID|SV-269795r1052420_rule

STIG-ID|OS10-NDM-000760

Vuln-ID|V-269795

OS10-NDM-000780 - The Dell OS10 Switch must use FIPS-validated Keyed-Hash Message Authentication Code (HMAC) to protect the integrity of nonlocal maintenance and diagnostic communications.

800-53|MA-4(6)

Detections

Analytics

DISA Dell OS10 Switch NDM STIG v1r1

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous