Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-5624 | NET-NAC-012 | SV-5624r1_rule | Medium |
Description |
---|
Eliminating unauthorized access to the network from inside the enclave is vital to keeping a network secure. Internal access to the private network is enabled by simply connecting a workstation or laptop to a wall plate or access point located in the work area. |
STIG | Date |
---|---|
Infrastructure L3 Switch Secure Technical Implementation Guide - Cisco | 2016-07-07 |
Check Text ( C-3773r1_chk ) |
---|
Review the switch configuration for the following interface command: dot1x reauthentication Once re-authentication is enabled, the default is 60 minutes. The interval can be made smaller. For example, if you would want re-authentication to occur every 30 minutes, you would configure the following interface commnand: dot1x timeout reauth-period 1800 |
Fix Text (F-5535r1_fix) |
---|
Ensure 802.1x reauthentication occurs every 60 minutes. |