UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The network device must enforce identification and authentication for the establishment of non-local maintenance and diagnostic sessions.


Overview

Finding ID Version Rule ID IA Controls Severity
SRG-NET-000177-NDM-000136 SRG-NET-000177-NDM-000136 SRG-NET-000177-NDM-000136_rule Medium
Description
Lack of authentication enables anyone to gain access to the network or possibly a network device, thus providing an opportunity for intruders to compromise resources within the network infrastructure. Network access control mechanisms interoperate to prevent unauthorized access and to enforce the organization's security policy. Authorization for access to any network device to perform maintenance and diagnostics requires an individual account identifier that has been approved, assigned, and configured on an authentication server. Authentication of non-local maintenance and diagnostics sessions must be accomplished through two-factor authentication via the combination of passwords, tokens, and biometrics.
STIG Date
Network Device Management Security Requirements Guide 2013-07-30

Details

Check Text ( C-SRG-NET-000177-NDM-000136_chk )
Verify the network device enforces identification and authentication for the establishment of non-local maintenance and diagnostic sessions. If the network device does not enforce identification and authentication for the establishment of non-local maintenance and diagnostic sessions, this is a finding.
Fix Text (F-SRG-NET-000177-NDM-000136_fix)
Configure the network device to enforce identification and authentication for the establishment of non-local maintenance and diagnostic sessions.