UCF STIG Viewer Logo

The network element must enforce the assigned privilege level for each administrator and authorizations for access to all commands relative to the privilege level in accordance with applicable policy for the device.


Overview

Finding ID Version Rule ID IA Controls Severity
V-26723 SRG-NET-000015 SV-33966r1_rule Medium
Description
The use of Authentication, Authorization, and Accounting (AAA) affords the best methods for controlling user access, authorization levels, and activity logging. Privilege levels as well as what commands each administrator is authorized to use based on the privilege level or account group membership must be controlled and assigned accordingly. By enabling AAA on the network elements in conjunction with an authentication server, the administrators can easily add, modify, or delete accounts as well as add or remove command authorizations and privilege levels. The use of an authentication server provides the capability to assign network administrators and engineers to tiered groups that contain their associated or required privilege level. By configuring the network element to collaborate with an authentication server, it can enforce the appropriate authorization for each administrator.
STIG Date
Network Security Requirements Guide 2011-12-28

Details

Check Text ( None )
None
Fix Text (None)
None