Detections
Analytics

CCI|CCI-004891

Title

Implement physically or logically separate subnetworks to isolate organization-defined critical system components and functions.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.16 CISC-L2-000210CiscoCIS Cisco IOS Switch L2S STIG v1.0.0 CAT II
1.16 CISC-L2-000210CiscoCIS Cisco IOS XE Switch L2S STIG v1.0.0 CAT II
1.16 CISC-L2-000210CiscoCIS Cisco NX OS Switch L2S STIG v1.0.0 CAT II
1.17 CISC-L2-000220CiscoCIS Cisco IOS Switch L2S STIG v1.0.0 CAT II
1.17 CISC-L2-000220CiscoCIS Cisco IOS XE Switch L2S STIG v1.0.0 CAT II
1.18 CISC-L2-000220CiscoCIS Cisco NX OS Switch L2S STIG v1.0.0 CAT II
1.18 CISC-L2-000230CiscoCIS Cisco IOS XE Switch L2S STIG v1.0.0 CAT II
1.18 CISC-L2-000230CiscoCIS Cisco IOS Switch L2S STIG v1.0.0 CAT II
1.19 CISC-L2-000230CiscoCIS Cisco NX OS Switch L2S STIG v1.0.0 CAT II
1.20 CISC-L2-000250CiscoCIS Cisco IOS Switch L2S STIG v1.0.0 CAT II
1.20 CISC-L2-000250CiscoCIS Cisco NX OS Switch L2S STIG v1.0.0 CAT II
1.20 CISC-L2-000260CiscoCIS Cisco IOS XE Switch L2S STIG v1.0.0 CAT II
1.21 CISC-L2-000250CiscoCIS Cisco IOS XE Switch L2S STIG v1.0.0 CAT II
1.21 CISC-L2-000260CiscoCIS Cisco NX OS Switch L2S STIG v1.0.0 CAT II
1.21 CISC-L2-000260CiscoCIS Cisco IOS Switch L2S STIG v1.0.0 CAT II
1.22 CISC-L2-000270CiscoCIS Cisco IOS Switch L2S STIG v1.0.0 CAT III
1.22 CISC-L2-000270CiscoCIS Cisco NX OS Switch L2S STIG v1.0.0 CAT III
1.22 CISC-L2-000270CiscoCIS Cisco IOS XE Switch L2S STIG v1.0.0 CAT III
1.39 CISC-RT-000450CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT II
1.41 CISC-RT-000400CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.42 CISC-RT-000400CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
ARST-L2-000170 - The Arista MLS layer 2 switch must have all disabled switch ports assigned to an unused VLAN.AristaDISA STIG Arista MLS EOS 4.2x L2S v2r1
ARST-L2-000170 - The Arista MLS layer 2 switch must have all disabled switch ports assigned to an unused VLAN.AristaDISA Arista MLS EOS 4.X L2S STIG v2r3
ARST-L2-000180 - The Arista MLS layer 2 switch must not have the default VLAN assigned to any host-facing switch ports.AristaDISA Arista MLS EOS 4.X L2S STIG v2r3
ARST-L2-000180 - The Arista MLS layer 2 switch must not have the default VLAN assigned to any host-facing switch ports.AristaDISA STIG Arista MLS EOS 4.2x L2S v2r1
ARST-L2-000190 - The Arista MLS layer 2 switch must have the default VLAN pruned from all trunk ports that do not require it.AristaDISA Arista MLS EOS 4.X L2S STIG v2r3
ARST-L2-000190 - The Arista MLS layer 2 switch must have the default VLAN pruned from all trunk ports that do not require it.AristaDISA STIG Arista MLS EOS 4.2x L2S v2r1
ARST-L2-000210 - The Arista MLS layer 2 switch must have all user-facing or untrusted ports configured as access switch ports.AristaDISA Arista MLS EOS 4.X L2S STIG v2r3
ARST-L2-000210 - The Arista MLS layer 2 switch must have all user-facing or untrusted ports configured as access switch ports.AristaDISA STIG Arista MLS EOS 4.2x L2S v2r1
ARST-L2-000220 - The Arista MLS layer 2 switch must have the native VLAN assigned to an ID other than the default VLAN for all 802.1q trunk links.AristaDISA Arista MLS EOS 4.X L2S STIG v2r3
ARST-L2-000220 - The Arista MLS layer 2 switch must have the native VLAN assigned to an ID other than the default VLAN for all 802.1q trunk links.AristaDISA STIG Arista MLS EOS 4.2x L2S v2r1
ARST-L2-000230 - The Arista MLS layer 2 switch must not have any switch ports assigned to the native VLAN.AristaDISA Arista MLS EOS 4.X L2S STIG v2r3
ARST-L2-000230 - The Arista MLS layer 2 switch must not have any switch ports assigned to the native VLAN.AristaDISA STIG Arista MLS EOS 4.2x L2S v2r1
CASA-FW-000230 - The Cisco ASA must be configured to filter inbound traffic on all external interfaces - ACLCiscoDISA STIG Cisco ASA FW v2r1
CASA-FW-000230 - The Cisco ASA must be configured to filter inbound traffic on all external interfaces - InterfaceCiscoDISA STIG Cisco ASA FW v2r1
CASA-FW-000240 - The Cisco ASA must be configured to filter outbound traffic on all internal interfaces - ACLCiscoDISA STIG Cisco ASA FW v2r1
CASA-FW-000240 - The Cisco ASA must be configured to filter outbound traffic on all internal interfaces - InterfaceCiscoDISA STIG Cisco ASA FW v2r1
CISC-L2-000210 - The Cisco switch must have all disabled switch ports assigned to an unused VLAN.CiscoDISA Cisco IOS XE Switch L2S STIG v3r2
CISC-L2-000210 - The Cisco switch must have all disabled switch ports assigned to an unused VLAN.CiscoDISA Cisco NX OS Switch L2S STIG v3r3
CISC-L2-000210 - The Cisco switch must have all disabled switch ports assigned to an unused VLAN.CiscoDISA Cisco IOS Switch L2S STIG v3r1
CISC-L2-000220 - The Cisco switch must not have the default VLAN assigned to any host-facing switch ports.CiscoDISA Cisco IOS XE Switch L2S STIG v3r2
CISC-L2-000220 - The Cisco switch must not have the default VLAN assigned to any host-facing switch ports.CiscoDISA Cisco NX OS Switch L2S STIG v3r3
CISC-L2-000220 - The Cisco switch must not have the default VLAN assigned to any host-facing switch ports.CiscoDISA Cisco IOS Switch L2S STIG v3r1
CISC-L2-000230 - The Cisco switch must have the default VLAN pruned from all trunk ports that do not require it.CiscoDISA Cisco IOS Switch L2S STIG v3r1
CISC-L2-000230 - The Cisco switch must have the default VLAN pruned from all trunk ports that do not require it.CiscoDISA Cisco NX OS Switch L2S STIG v3r3
CISC-L2-000230 - The Cisco switch must have the default VLAN pruned from all trunk ports that do not require it.CiscoDISA Cisco IOS XE Switch L2S STIG v3r2
CISC-L2-000250 - The Cisco switch must have all user-facing or untrusted ports configured as access switch ports.CiscoDISA Cisco IOS XE Switch L2S STIG v3r2
CISC-L2-000250 - The Cisco switch must have all user-facing or untrusted ports configured as access switch ports.CiscoDISA Cisco NX OS Switch L2S STIG v3r3
CISC-L2-000250 - The Cisco switch must have all user-facing or untrusted ports configured as access switch ports.CiscoDISA Cisco IOS Switch L2S STIG v3r1
CISC-L2-000260 - The Cisco switch must have the native VLAN assigned to an ID other than the default VLAN for all 802.1q trunk links.CiscoDISA Cisco IOS XE Switch L2S STIG v3r2