Title

Two-factor authentication must be used for remote access ports. (Cat III impact)

Discussion

Remote access ports must require two-factor authentication. This is defined as requiring something along the lines of a token in addition to a User ID and password combination. The use of two-factor authentication will help prevent unauthorized persons from accessing the DSN component.

Check Content

Review site documentation to confirm a policy and procedure requires two-factor authentication is used to connect to remote access ports. If two-factor authentication is not used for remote access ports, this is a finding.

Fix Text

Implement a site policy and procedure requires two-factor authentication for connections to remote access ports.

Additional Identifiers

Rule ID: SV-8481r2_rule

Vulnerability ID: V-7995

Group Title: Remote access authentication

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.