The network element must enforce identification and authentication for the establishment of nonlocal maintenance and diagnostic sessions.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000177-RTR-NA	SRG-NET-000177-RTR-NA	SRG-NET-000177-RTR-NA_rule		Medium

Description
Lack of authentication enables anyone to gain access to the network or possibly a network element providing opportunity for intruders to compromise resources within the network infrastructure. Network access control mechanisms interoperate to prevent unauthorized access and to enforce the organizations security policy. Authorization for access to any network element to perform maintenance and diagnostics requires an individual account identifier that has been approved, assigned, and configured on an authentication server. Authentication of nonlocal maintenance and diagnostics sessions must be accomplished through two-factor authentication via the combination of passwords, tokens, and biometrics. This requirement is applicable to network device management and is not applicable to the routing function.

Description

Lack of authentication enables anyone to gain access to the network or possibly a network element providing opportunity for intruders to compromise resources within the network infrastructure. Network access control mechanisms interoperate to prevent unauthorized access and to enforce the organizations security policy. Authorization for access to any network element to perform maintenance and diagnostics requires an individual account identifier that has been approved, assigned, and configured on an authentication server. Authentication of nonlocal maintenance and diagnostics sessions must be accomplished through two-factor authentication via the combination of passwords, tokens, and biometrics. This requirement is applicable to network device management and is not applicable to the routing function.

STIG	Date
Router Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000177-RTR-NA_chk )
This requirement is NA for router.

Fix Text (F-SRG-NET-000177-RTR-NA_fix)
This requirement is NA for router.