The network element must obscure feedback of authentication information during the authentication process to protect the information from possible use by unauthorized individuals.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000167-RTR-NA	SRG-NET-000167-RTR-NA	SRG-NET-000167-RTR-NA_rule		Medium

Description
Authorization for access to any network element requires an approved and assigned individual account identifier. To ensure that only the assigned individual is using the account, the account holder must create a strong password that is privately maintained and changed based on the organization defined frequency. During the authentication process, malicious users can gain knowledge of passwords by sniffing local traffic between the network element and the authentication server, or even by walking by a user logging on and viewing what had been keyed in. It is imperative the network element prevents any form of authentication feedback that can be used to learn account passwords. This requirement is applicable to network device management and is not applicable to the routing function.

Description

Authorization for access to any network element requires an approved and assigned individual account identifier. To ensure that only the assigned individual is using the account, the account holder must create a strong password that is privately maintained and changed based on the organization defined frequency. During the authentication process, malicious users can gain knowledge of passwords by sniffing local traffic between the network element and the authentication server, or even by walking by a user logging on and viewing what had been keyed in. It is imperative the network element prevents any form of authentication feedback that can be used to learn account passwords. This requirement is applicable to network device management and is not applicable to the routing function.

STIG	Date
Router Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000167-RTR-NA_chk )
This requirement is NA for router.

Fix Text (F-SRG-NET-000167-RTR-NA_fix)
This requirement is NA for router.