Current and previous network element configurations must be stored in a secured location.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-251375	NET1040	SV-251375r853654_rule		Low

Description

If the network element's non-volatile memory is lost without a recent configuration stored in an offline location, it may take time to recover that segment of the network. Users connected directly to the switch or router will be without service for a longer than acceptable time.

STIG	Date
Network Infrastructure Policy Security Technical Implementation Guide	2024-08-02

Details

Check Text (C-54810r806078_chk)

At a minimum, a copy of the current and previous network element configurations must be saved. Storage can take place on a classified network, OOB network, or offline.

If the current and previous network element configurations are not stored in a secured location, this is a finding.

Fix Text (F-54763r806079_fix)

The network administrator will store the current and previous router and switch configurations in a secure location. Storage can take place on a classified network, OOB network, or offline. Configurations can only be accessed by server or network admin.