The network element must provide finer-grained allocation of account privileges through the use of separate processing domains.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000036-RTR-NA	SRG-NET-000036-RTR-NA	SRG-NET-000036-RTR-NA_rule		Low

Description
Each account should grant access to only those privileges for which the system administrator is authorized. By not restricting system administrators to their proper privilege levels, access to restricted and advanced functions may be provided to system administrators not authorized or trained to use those functions. Network disruptions or outages could be caused by mistakes made by inexperienced system administrators. Monitoring account usage will reduce the risk of a privileged account being exploited by unauthorized persons and provides logging to be used for forensic investigation. Only accounts with the highest privilege level should have the authorization to configure security policy filters. This requirement is applicable to network device management and is not applicable to the routing function.

Description

Each account should grant access to only those privileges for which the system administrator is authorized. By not restricting system administrators to their proper privilege levels, access to restricted and advanced functions may be provided to system administrators not authorized or trained to use those functions. Network disruptions or outages could be caused by mistakes made by inexperienced system administrators. Monitoring account usage will reduce the risk of a privileged account being exploited by unauthorized persons and provides logging to be used for forensic investigation. Only accounts with the highest privilege level should have the authorization to configure security policy filters. This requirement is applicable to network device management and is not applicable to the routing function.

STIG	Date
Router Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000036-RTR-NA_chk )
This requirement is NA for router.

Fix Text (F-SRG-NET-000036-RTR-NA_fix)
This requirement is NA for router.