Detections
Analytics

CCI|CCI-004931

Title

Establish organization-defined alternate communications paths for system operations organizational command and control.

Reference Item Details

Category: 2024

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.17 CISC-L2-000240CiscoCIS Cisco NX OS Switch L2S STIG v1.0.0 CAT II
1.19 CISC-L2-000240CiscoCIS Cisco IOS XE Switch L2S STIG v1.0.0 CAT II
1.19 CISC-L2-000240CiscoCIS Cisco IOS Switch L2S STIG v1.0.0 CAT II
1.39 CISC-RT-000580CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT III
1.40 CISC-RT-000590CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT III
1.44 CISC-RT-000630CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT I
1.45 CISC-RT-000640CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT I
1.46 CISC-RT-000650CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT II
1.48 CISC-RT-000670CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT I
1.49 CISC-RT-000680CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT I
1.59 CISC-RT-000580CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT III
1.60 CISC-RT-000580CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT III
1.60 CISC-RT-000590CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT III
1.61 CISC-RT-000590CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT III
1.64 CISC-RT-000630CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT I
1.65 CISC-RT-000630CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT I
1.65 CISC-RT-000640CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT I
1.66 CISC-RT-000640CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT I
1.66 CISC-RT-000650CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.67 CISC-RT-000650CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
1.68 CISC-RT-000670CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT I
1.69 CISC-RT-000670CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT I
1.74 CISC-RT-000950CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT III
1.96 CISC-RT-000950CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT III
1.97 CISC-RT-000950CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT III
ARST-L2-000200 - The Arista MLS layer 2 switch must not use the default VLAN for management traffic.AristaDISA Arista MLS EOS 4.X L2S STIG v2r3
ARST-L2-000200 - The Arista MLS layer 2 switch must not use the default VLAN for management traffic.AristaDISA STIG Arista MLS EOS 4.2x L2S v2r1
ARST-RT-000420 - The out-of-band management (OOBM) Arista gateway router must be configured to forward only authorized management traffic to the Network Operations Center (NOC).AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000420 - The out-of-band management (OOBM) Arista gateway router must be configured to forward only authorized management traffic to the Network Operations Center (NOC).AristaDISA Arista MLS EOS 4.X Router STIG v2r2
ARST-RT-000430 - The out-of-band management (OOBM) Arista gateway router must be configured to block any traffic destined to itself that is not sourced from the OOBM network or the NOC.AristaDISA Arista MLS EOS 4.X Router STIG v2r2
ARST-RT-000430 - The out-of-band management (OOBM) Arista gateway router must be configured to block any traffic destined to itself that is not sourced from the OOBM network or the NOC.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000440 - The Arista router must be configured to only permit management traffic that ingresses and egresses the out-of-band management (OOBM) interface.AristaDISA Arista MLS EOS 4.X Router STIG v2r2
ARST-RT-000440 - The Arista router must be configured to only permit management traffic that ingresses and egresses the out-of-band management (OOBM) interface.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000690 - The Arista BGP router must be configured to use its loopback address as the source address for iBGP peering sessions.AristaDISA Arista MLS EOS 4.X Router STIG v2r2
ARST-RT-000690 - The Arista BGP router must be configured to use its loopback address as the source address for iBGP peering sessions.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000700 - The MPLS router must be configured to use its loopback address as the source address for LDP peering sessions.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000700 - The MPLS router must be configured to use its loopback address as the source address for LDP peering sessions.AristaDISA Arista MLS EOS 4.X Router STIG v2r2
ARST-RT-000730 - The PE router must be configured to have each Virtual Routing and Forwarding (VRF) instance bound to the appropriate physical or logical interfaces to maintain traffic separation between all MPLS L3VPNs.AristaDISA Arista MLS EOS 4.X Router STIG v2r2
ARST-RT-000730 - The PE router must be configured to have each Virtual Routing and Forwarding (VRF) instance bound to the appropriate physical or logical interfaces to maintain traffic separation between all MPLS L3VPNs.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000740 - The PE router must be configured to have each Virtual Routing and Forwarding (VRF) instance with the appropriate Route Target (RT).AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000740 - The PE router must be configured to have each Virtual Routing and Forwarding (VRF) instance with the appropriate Route Target (RT).AristaDISA Arista MLS EOS 4.X Router STIG v2r2
ARST-RT-000750 - The PE router must be configured to have each VRF with the appropriate Route Distinguisher (RD).AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000750 - The PE router must be configured to have each VRF with the appropriate Route Distinguisher (RD).AristaDISA Arista MLS EOS 4.X Router STIG v2r2
ARST-RT-000760 - The PE router providing MPLS Virtual Private Wire Service (VPWS) must be configured to have the appropriate virtual circuit identification (VC ID) for each attachment circuit.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000760 - The PE router providing MPLS Virtual Private Wire Service (VPWS) must be configured to have the appropriate virtual circuit identification (VC ID) for each attachment circuit.AristaDISA Arista MLS EOS 4.X Router STIG v2r2
ARST-RT-000770 - The Arista Multicast Source Discovery Protocol (MSDP) router must be configured to use its loopback address as the source address when originating MSDP traffic.AristaDISA STIG Arista MLS EOS 4.2x Router v2r1
ARST-RT-000770 - The Arista Multicast Source Discovery Protocol (MSDP) router must be configured to use its loopback address as the source address when originating MSDP traffic.AristaDISA Arista MLS EOS 4.X Router STIG v2r2
CASA-FW-000260 - The Cisco ASA must be configured to forward management traffic to the Network Operations Center (NOC) via an IPsec tunnel - ACLCiscoDISA STIG Cisco ASA FW v2r1
CASA-FW-000260 - The Cisco ASA must be configured to forward management traffic to the Network Operations Center (NOC) via an IPsec tunnel - authenticationCiscoDISA STIG Cisco ASA FW v2r1
CASA-FW-000260 - The Cisco ASA must be configured to forward management traffic to the Network Operations Center (NOC) via an IPsec tunnel - crypto ipsecCiscoDISA STIG Cisco ASA FW v2r1