The network device must enforce the identification and authentication of all organizational users.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000138-NDM-000101	SRG-NET-000138-NDM-000101	SRG-NET-000138-NDM-000101_rule		Low

Description
Network access control mechanisms interoperate to prevent unauthorized access and to enforce the organization's security policy. Access to the network must be categorized as administrator, user, or guest so the appropriate authorization can be assigned to the user requesting access to the network or network device. Authorization requires an individual account identifier that has been approved, assigned, and configured on an authentication server. Authentication of user identities is accomplished through the use of passwords, tokens, biometrics, or in the case of multifactor authentication, some combination thereof. Lack of authentication enables anyone to gain access to the network or possibly a network device providing opportunity for intruders to compromise resources within the network infrastructure.

Description

Network access control mechanisms interoperate to prevent unauthorized access and to enforce the organization's security policy. Access to the network must be categorized as administrator, user, or guest so the appropriate authorization can be assigned to the user requesting access to the network or network device. Authorization requires an individual account identifier that has been approved, assigned, and configured on an authentication server. Authentication of user identities is accomplished through the use of passwords, tokens, biometrics, or in the case of multifactor authentication, some combination thereof. Lack of authentication enables anyone to gain access to the network or possibly a network device providing opportunity for intruders to compromise resources within the network infrastructure.

STIG	Date
Network Device Management Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000138-NDM-000101_chk )
Verify the network device enforces the identification and authentication of all organizational users through an authentication server. If the network device does not enforce the identification and authentication of all organizational users through an authentication server, this is a finding.

Fix Text (F-SRG-NET-000138-NDM-000101_fix)
Configure the network device to enforce the identification and authentication of all organizational users through an authentication server.