| 2. OpenStack Networking - Policy.json - 'shared_firewalls' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 6. OpenStack Networking - Policy.json - 'get_port:binding:host_id' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 14. OpenStack Networking - Policy.json - 'get_loadbalancer-pools' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 18. OpenStack Networking - Policy.json - 'get_l3-agents' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 19. OpenStack Networking - Policy.json - 'update_port' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 21. OpenStack Networking - Policy.json - 'create_network' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 24. OpenStack Networking - Policy.json - 'create_port:device_owner' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 27. OpenStack Networking - Policy.json - 'create_router:external_gateway_info:external_fixed_ips' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 28. OpenStack Networking - Policy.json - 'create_router:external_gateway_info:enable_snat' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 30. OpenStack Networking - Policy.json - 'update_router:external_gateway_info:enable_snat' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 32. OpenStack Networking - Policy.json - 'get_firewall_rule' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 37. OpenStack Networking - Policy.json - 'add_router_interface' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 39. OpenStack Networking - Policy.json - 'update_port:mac_learning_enabled' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 42. OpenStack Networking - Policy.json - 'default' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 43. OpenStack Networking - Policy.json - 'external' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 44. OpenStack Networking - Policy.json - 'get_dhcp-networks' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 48. OpenStack Networking - Policy.json - 'get_firewall_policy' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 51. OpenStack Networking - Policy.json - 'update_subnet' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 59. OpenStack Networking - Policy.json - 'create_port:mac_learning_enabled' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 66. OpenStack Networking - Policy.json - 'create_subnetpool:shared' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 76. OpenStack Networking - Policy.json - 'update_floatingip' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 83. OpenStack Networking - Policy.json - 'create_firewall:shared' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 84. OpenStack Networking - Policy.json - 'shared_firewall_policies' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 87. OpenStack Networking - Policy.json - 'update_port:allowed_address_pairs' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 88. OpenStack Networking - Policy.json - 'delete_firewall_policy' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 93. OpenStack Networking - Policy.json - 'create_router:ha' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 100. OpenStack Networking - Policy.json - 'get_subnet' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 101. OpenStack Networking - Policy.json - 'admin_only' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 106. OpenStack Networking - Policy.json - 'delete_network_profile' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 118. OpenStack Networking - Policy.json - 'delete_subnetpool' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| 129. OpenStack Networking - Policy.json - 'update_firewall_policy' | TNS OpenStack Neutron/Networking Security Guide | Unix | ACCESS CONTROL |
| ACLs: Filter for RFC 1918 addresses (10.0.0.0/8) | TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit | Alcatel | SYSTEM AND COMMUNICATIONS PROTECTION |
| ACLs: Filter for RFC 3330 addresses (127.0.0.0/8) | TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit | Alcatel | SYSTEM AND COMMUNICATIONS PROTECTION |
| ACLs: Filter for RFC 3330 addresses (169.254.0.0/16) | TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit | Alcatel | SYSTEM AND COMMUNICATIONS PROTECTION |
| Authentication: enable remote authentication | TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit | Alcatel | IDENTIFICATION AND AUTHENTICATION |
| BGP: Authenticate peers | TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit | Alcatel | ACCESS CONTROL |
| Centralized authentication - server | ArubaOS CX 10.x Hardening Guide v1.0.0 | ArubaOS | IDENTIFICATION AND AUTHENTICATION |
| CPM Filtering: Filter for IGMP | TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit | Alcatel | SYSTEM AND COMMUNICATIONS PROTECTION |
| CPM Filtering: Filter for PIM | TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit | Alcatel | SYSTEM AND COMMUNICATIONS PROTECTION |
| DHCP snooping - port trust and vlans | ArubaOS Switch 16.x Hardening Guide v1.0.0 | ArubaOS | SYSTEM AND COMMUNICATIONS PROTECTION |
| DNS: A trusted primary DNS server is configured | TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit | Alcatel | SYSTEM AND COMMUNICATIONS PROTECTION |
| Failed authentication lockout - num-attempts | ArubaOS Switch 16.x Hardening Guide v1.0.0 | ArubaOS | ACCESS CONTROL |
| Login: Accounts are locked after 3 failed password attempts | TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit | Alcatel | ACCESS CONTROL |
| Login: Idle connections time out after 5 minutes or less | TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit | Alcatel | CONFIGURATION MANAGEMENT |
| Login: Telnet is disabled (IPv4) | TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit | Alcatel | CONFIGURATION MANAGEMENT |
| Login: Telnet is disabled (IPv6) | TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit | Alcatel | CONFIGURATION MANAGEMENT |
| Password Complexity: Require at least one number | TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit | Alcatel | IDENTIFICATION AND AUTHENTICATION |
| Time synchronization - ntp enable | ArubaOS Switch 16.x Hardening Guide v1.0.0 | ArubaOS | AUDIT AND ACCOUNTABILITY |
| Time: Disable Daylight Savings Time adjustment | TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit | Alcatel | AUDIT AND ACCOUNTABILITY |
| Time: Set system clock to UTC | TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit | Alcatel | AUDIT AND ACCOUNTABILITY |
