CCI|CCI-001414

Title

Enforce approved authorizations for controlling the flow of information between connected systems based on organization-defined information flow control policies.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.3 CISC-RT-000060CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT III
1.3 CISC-RT-000060CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT III
1.3 CISC-RT-000060CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT III
1.6 CISC-RT-000060CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT III
1.14 CISC-RT-000230CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT III
1.14 CISC-RT-000230CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT III
1.18 CISC-RT-000250CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.19 CISC-RT-000250CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT II
1.19 CISC-RT-000250CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
1.21 CISC-RT-000280CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT I
1.22 CISC-RT-000280CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT I
1.22 CISC-RT-000290CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT I
1.23 CISC-RT-000290CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT I
1.23 CISC-RT-000300CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT III
1.24 CISC-RT-000300CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT III
1.43 CISC-RT-000420CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.44 CISC-RT-000420CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
1.44 CISC-RT-000430CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.45 CISC-RT-000430CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
1.59 CISC-RT-000790CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT II
1.60 CISC-RT-000800CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT II
1.61 CISC-RT-000810CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT III
1.63 CISC-RT-000830CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT III
1.64 CISC-RT-000840CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT III
1.72 CISC-RT-000790CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT II
1.73 CISC-RT-000800CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT II
1.74 CISC-RT-000810CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT III
1.76 CISC-RT-000830CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT III
1.77 CISC-RT-000840CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT III
1.80 CISC-RT-000790CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.81 CISC-RT-000790CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
1.81 CISC-RT-000800CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.82 CISC-RT-000800CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
1.82 CISC-RT-000810CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT III
1.83 CISC-RT-000810CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT III
1.84 CISC-RT-000830CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT III
1.85 CISC-RT-000830CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT III
1.85 CISC-RT-000840CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT III
1.86 CISC-RT-000840CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT III
AMLS-L2-000110 - The Arista Multilayer Switch must enforce approved authorizations for controlling the flow of information between interconnected systems based on organization-defined information flow control policies.AristaDISA STIG Arista MLS DCS-7000 Series L2S v1r3
AMLS-L3-000100 - The Arista Multilayer Switch must enforce approved authorizations for controlling the flow of information between interconnected networks in accordance with applicable policy.AristaDISA STIG Arista MLS DCS-7000 Series RTR v1r4
AMLS-L3-000110 - The Arista Multilayer Switch must disable Protocol Independent Multicast (PIM) on all interfaces that are not required to support multicast routing.AristaDISA STIG Arista MLS DCS-7000 Series RTR v1r4
AMLS-L3-000120 - The Arista Multilayer Switch must bind a Protocol Independent Multicast (PIM) neighbor filter to interfaces that have PIM enabled - PIM neighbor filter to interfaces that have PIM enabled.AristaDISA STIG Arista MLS DCS-7000 Series RTR v1r4
AMLS-L3-000130 - The Arista Multilayer Switch must establish boundaries for IPv6 Admin-Local, IPv6 Site-Local, IPv6 Organization-Local scope, and IPv4 Local-Scope multicast traffic.AristaDISA STIG Arista MLS DCS-7000 Series RTR v1r4
AMLS-L3-000140 - The Arista Multilayer Switch must be configured so inactive router interfaces are disabled.AristaDISA STIG Arista MLS DCS-7000 Series RTR v1r4
AMLS-L3-000150 - The Arista Multilayer Switch must protect an enclave connected to an Alternate Gateway by using an inbound filter that only permits packets with destination addresses within the sites address space.AristaDISA STIG Arista MLS DCS-7000 Series RTR v1r4
AMLS-L3-000160 - If Border Gateway Protocol (BGP) is enabled on The Arista Multilayer Switch, The Arista Multilayer Switch must not be a BGP peer with a router from an Autonomous System belonging to any Alternate Gateway.AristaDISA STIG Arista MLS DCS-7000 Series RTR v1r4
AMLS-L3-000170 - The Arista Multilayer Switch must not redistribute static routes to alternate gateway service provider into an Exterior Gateway Protocol or Interior Gateway Protocol to the NIPRNet or to other Autonomous System.AristaDISA STIG Arista MLS DCS-7000 Series RTR v1r4
AMLS-L3-000180 - The Arista Multilayer Switch must enforce that Interior Gateway Protocol instances configured on the out-of-band management gateway router only peer with their own routing domain.AristaDISA STIG Arista MLS DCS-7000 Series RTR v1r4
AMLS-L3-000190 - The Arista Multilayer Switch must enforce that the managed network domain and the management network domain are separate routing domains and the Interior Gateway Protocol instances are not redistributed or advertised to each other.AristaDISA STIG Arista MLS DCS-7000 Series RTR v1r4