The network device must employ cryptographic mechanisms to protect the integrity and confidentiality of non-local maintenance and diagnostic communications.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000176-NDM-000135	SRG-NET-000176-NDM-000135	SRG-NET-000176-NDM-000135_rule		Medium

Description
Non-local maintenance and diagnostic activities are those activities conducted by individuals communicating through a network; either an external network (e.g., the Internet) or an internal network. Network access control mechanisms interoperate to prevent unauthorized access and to enforce the organization's security policy. Authorization for access to any network device to perform maintenance and diagnostics requires an individual account identifier that has been approved, assigned, and configured on an authentication server. Authentication of non-local maintenance and diagnostics sessions must be accomplished through two-factor authentication via the combination of passwords, tokens, and biometrics. If packets associated with these sessions are not encrypted, the integrity and confidentiality of non-local maintenance and diagnostics is at risk.

Description

Non-local maintenance and diagnostic activities are those activities conducted by individuals communicating through a network; either an external network (e.g., the Internet) or an internal network. Network access control mechanisms interoperate to prevent unauthorized access and to enforce the organization's security policy. Authorization for access to any network device to perform maintenance and diagnostics requires an individual account identifier that has been approved, assigned, and configured on an authentication server. Authentication of non-local maintenance and diagnostics sessions must be accomplished through two-factor authentication via the combination of passwords, tokens, and biometrics. If packets associated with these sessions are not encrypted, the integrity and confidentiality of non-local maintenance and diagnostics is at risk.

STIG	Date
Network Device Management Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000176-NDM-000135_chk )
Verify the network device employs cryptographic mechanisms to protect the integrity and confidentiality of non-local maintenance and diagnostic communications. If the network device does not employ cryptographic mechanisms to protect the integrity and confidentiality of non-local maintenance and diagnostic sessions, this is a finding.

Fix Text (F-SRG-NET-000176-NDM-000135_fix)
Configure the network device to employ cryptographic mechanisms to protect the integrity and confidentiality of non-local maintenance and diagnostic communications.