Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Proxy Neighbor Discovery Protocol (NDP) must not be enabled on the system.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-22544 | GEN007760 | SV-29601r1_rule | ECSC-1 | Medium |
| Description |
|---|
| Proxy Neighbor Discovery Protocol (NDP) allows a system to respond to NDP requests on one interface on behalf of hosts connected to another interface. If this function is enabled when not required, addressing information may be leaked between the attached network segments. |
| STIG | Date |
|---|---|
| HP-UX 11.31 Security Technical Implementation Guide | 2017-12-08 |
Details
| Check Text ( C-35083r1_chk ) |
|---|
| Determine if any non-local published NDP entries exist on the system. # ndp -a If any NDP entries contain a flag of P, they are non-local published entries, and this is a finding. |
| Fix Text (F-32129r1_fix) |
|---|
| Remove non-local published NDP entries from the system. # ndp -d Check system startup scripts for commands publishing NDP entries (such as "ndp -s |