UCF STIG Viewer Logo

The network element must enforce identification and authentication for the establishment of non-local maintenance and diagnostic sessions.


Overview

Finding ID Version Rule ID IA Controls Severity
V-34128 SRG-NET-000177-DNS-NA SV-44581r1_rule Medium
Description
Lack of authentication enables anyone to gain access to the network or possibly a network element providing opportunity for intruders to compromise resources within the network infrastructure. Network access control mechanisms interoperate to prevent unauthorized access and to enforce the organization's security policy. Authorization for access to any network element to perform maintenance and diagnostics requires an individual account identifier that has been approved, assigned, and configured on an authentication server. Authentication of non-local maintenance and diagnostics sessions must be accomplished through two-factor authentication via the combination of passwords, tokens, and biometrics. All sessions should enforce identification and authentication, DNS does not know if it is non-local access.
STIG Date
Domain Name System (DNS) Security Requirements Guide 2012-10-24

Details

Check Text ( C-42088r1_chk )
This is not a function of DNS.
Fix Text (F-38038r1_fix)
This requirement is NA for DNS. No fix required.