Detections
Analytics
ARBA-NT-000440 - AOS must manage excess bandwidth to limit the effects of packet flooding types of denial-of-service (DoS) attacks.
Information
A network element experiencing a DoS attack will not be able to handle production traffic load. The high utilization and CPU caused by a DoS attack will also have an effect on control keep-alives and timers used for neighbor peering, resulting in route flapping, and will eventually sinkhole production traffic.The device must be configured to contain and limit a DoS attack's effect on the device's resource utilization. The use of redundant components and load balancing are examples of mitigating "flood-type" DoS attacks through increased capacity.
NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
Solution
Configure AOS using the web interface:Navigate to Configuration >> Services >> Firewall and enable DoS protection in accordance with organization-defined policy.
Click Submit >> Pending Changes >> Deploy Changes.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_HPE_Aruba_Networking_AOS_Y26M04_STIG.zip
Item Details
Audit Name: DISA HPE Aruba Networking AOS Wireless STIG v1r2
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-5(2), CAT|II, CCI|CCI-001095, Rule-ID|SV-266591r1040263_rule, STIG-ID|ARBA-NT-000440, Vuln-ID|V-266591
Plugin: ArubaOS
Control ID: 355a802c926b91fc9f6ff18992b29d573c940cfa999d0fdd0c871b3f59206706