The network device must protect the confidentiality and integrity of system information at rest.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000238-NDM-000176	SRG-NET-000238-NDM-000176	SRG-NET-000238-NDM-000176_rule		Low

Description

This requirement is intended to address the confidentiality and integrity of system information at rest (e.g., network device rule sets or ACLs) when it is located on a storage device within the network device or as a component of the network device. This protection is required to prevent unauthorized alteration, corruption, or disclosure of information when not stored directly on the network device.

STIG	Date
Network Device Management Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000238-NDM-000176_chk )
Review the configuration of the network device. Verify all configuration files, system files, and logs located on storage devices within, or attached to, network device components protect the confidentiality and integrity of the stored information. If the network device does not protect the confidentiality and integrity of data at rest, this is a finding.

Fix Text (F-SRG-NET-000238-NDM-000176_fix)
Enable integrity and confidentiality protection for stored information.