The network element must prevent the installation of organizationally defined critical software programs not signed with an organizationally approved private key.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| SRG-NET-000121-RTR-NA | SRG-NET-000121-RTR-NA | SRG-NET-000121-RTR-NA_rule | Low |
| Description |
|---|
| Changes to any software components of the network element can have significant effects on the overall security of the network. Verifying the authenticity of the software prior to installation validates the integrity of the patch or upgrade received from a vendor. This ensures the software has not been tampered with and that it has been provided by a trusted vendor. This requirement is applicable to network device management and is not applicable to the routing function. |
| STIG | Date |
|---|---|
| Router Security Requirements Guide | 2013-07-30 |
Details
| Check Text ( C-SRG-NET-000121-RTR-NA_chk ) |
|---|
| This requirement is NA for router. |
| Fix Text (F-SRG-NET-000121-RTR-NA_fix) |
|---|
| This requirement is NA for router. |