Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The network device must require authentication prior to establishing a management connection for administrative access.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-3175 | NET1636 | SV-3175r3_rule | ECSC-1 | High |
| Description |
|---|
| Network devices with no password for administrative access via a management connection provide the opportunity for anyone with network access to the device to make configuration changes enabling them to disrupt network operations resulting in a network outage. |
| STIG | Date |
|---|---|
| IPSec VPN Gateway Security Technical Implementation Guide | 2013-10-08 |
Details
| Check Text ( C-3516r7_chk ) |
|---|
| Review the network device configuration to verify all management connections for administrative access require authentication. |
| Fix Text (F-3200r3_fix) |
|---|
| Configure authentication for all management connections. |