An error occurred:

Layer 2 Switch STIG

Layer 2 Switch Security Technical Implementation Guide

ID Vuln ID Title Cat Status
NET0230 V-3012 Network devices must be password protected. Cat I
NET0240 V-3143 Network devices must not have any default manufacturer passwords. Cat I
NET0340 V-3013 Network devices must display the DoD-approved logon banner warning. Cat II
NET0405 V-28784 A service or feature that calls home to the vendor must be disabled. Cat II
NET0433 V-15432 Network devices must use two or more authentication servers for the purpose of granting administrative access. Cat II
NET0440 V-3966 In the event the authentication server is unavailable, the network device must have a single local account of last resort defined. Cat II
NET0441 V-15434 The emergency administration account must be set to an appropriate authorization level to perform necessary administrative functions when the authentication server is not online. Cat I
NET0460 V-3056 Group accounts must not be configured for use on the network device. Cat I
NET0465 V-3057 Authorized accounts must be assigned the least privilege level necessary to perform assigned duties. Cat II
NET0470 V-3058 Unauthorized accounts must not be configured for access to the network device. Cat II
NET0600 V-3062 Network devices must be configured to ensure passwords are not viewable when displaying configuration information. Cat I
NET0700 V-3160 Network devices must be running a current and supported operating system with all IAVMs addressed. Cat II
NET0730 V-3079 Network devices must have the Finger service disabled. Cat III
NET0740 V-3085 Network devices must have HTTP service for administrative access disabled. Cat II
NET0744 V-14669 Network devices must have BSDr commands disabled. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.