Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
SRG-NET-000238-NDM-000176 | SRG-NET-000238-NDM-000176 | SRG-NET-000238-NDM-000176_rule | Low |
Description |
---|
This requirement is intended to address the confidentiality and integrity of system information at rest (e.g., network device rule sets or ACLs) when it is located on a storage device within the network device or as a component of the network device. This protection is required to prevent unauthorized alteration, corruption, or disclosure of information when not stored directly on the network device. |
STIG | Date |
---|---|
Network Device Management Security Requirements Guide | 2013-07-30 |
Check Text ( C-SRG-NET-000238-NDM-000176_chk ) |
---|
Review the configuration of the network device. Verify all configuration files, system files, and logs located on storage devices within, or attached to, network device components protect the confidentiality and integrity of the stored information. If the network device does not protect the confidentiality and integrity of data at rest, this is a finding. |
Fix Text (F-SRG-NET-000238-NDM-000176_fix) |
---|
Enable integrity and confidentiality protection for stored information. |