The IDPS must map the authenticated identity to the user account for PKI-based authentication.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| SRG-NET-000166-IDPS-000154 | SRG-NET-000166-IDPS-000154 | SRG-NET-000166-IDPS-000154_rule | Medium |
| Description |
|---|
| Authorization for access to any network element requires an approved and assigned individual account identifier. To ensure that only the assigned individual is using the account, the account must be bound to a user certificate when PKI-based authentication is implemented. |
| STIG | Date |
|---|---|
| IDPS Security Requirements Guide (SRG) | 2012-03-08 |
Details
| Check Text ( C-43293_chk ) |
|---|
| Inspect the user function of the device to view the PKI configuration. Verify each account is mapped to the user's PKI certificate. If the local accounts are not mapped to the user's PKI certificate, this is a finding. |
| Fix Text (F-43293_fix) |
|---|
| Reconfigure each local account. Map the PKI certificate for each local user to the user's account. |