Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-55257 | SRG-APP-000396-NDM-000311 | SV-69503r1_rule | Medium |
Description |
---|
Dynamic identifier management prevents disruption of operations by minimizing the need for system restarts. Dynamic establishment of new identifiers will occur while the system is operational. New identifiers or changes to existing identifiers must take effect without the need for a system or session restart. Preestablished trust relationships and mechanisms with appropriate authorities (e.g., Active Directory or authentication server) which validate each identifier are essential to prevent unauthorized access by changed or revoked accounts. |
STIG | Date |
---|---|
Network Device Management Security Requirements Guide | 2017-04-07 |
Check Text ( C-55877r1_chk ) |
---|
Determine if the network device dynamically manages identifiers. This requirement may be verified by demonstration, configuration review, or validated test results. This requirement may be met through use of a properly configured authentication server if the device is configured to use the authentication server. If identifiers are not dynamically managed, this is a finding. |
Fix Text (F-60121r1_fix) |
---|
Configure the network device or its associated authentication server to dynamically manage identifiers. |