What changed in Arista Multilayer Switch DCS-7000 Series L2S STIG V1R3V1R3 changes

Arista Multilayer Switch DCS-7000 Series L2S STIG V1R3 (2024-07-24) replaced V1R2 (2016-04-22): 8 checks added, 7 removed. It has 8 checks, against 7 in V1R2.

V1R3 checklistV1R2 checklist Compare V1R2 and V1R3 in STIG Compare

  • 8 added
  • 7 removed
  • 0 updated

Added in V1R3 (8)

  • V-214662CAT IIThe Arista Multilayer Switch must enforce approved authorizations for controlling the flow of information within the network based on organization-defined information flow control policies.
  • V-214663CAT IIThe Arista Multilayer Switch must enforce approved authorizations for controlling the flow of information between interconnected systems based on organization-defined information flow control policies.
  • V-214664CAT IIThe Arista Multilayer Switch must uniquely identify all network-connected endpoint devices before establishing any connection.
  • V-214665CAT IIThe Arista Multilayer Switch must authenticate all endpoint devices before establishing a network connection using bidirectional authentication that is cryptographically based.
  • V-214666CAT IIThe Arista Multilayer Switch must authenticate 802.1X connected devices before establishing any connection.
  • V-230143CAT IIThe Arista Multilayer Switch must re-authenticate all endpoint devices every 60 minutes or less.
  • V-230144CAT IIThe Arista Multilayer Switch must re-authenticate 802.1X connected devices every hour.
  • V-264427CAT IThe Arista MLS L2S must be using a version supported by the vendor.

Removed since V1R2 (7)

  • V-60813CAT IIThe Arista Multilayer Switch must enforce approved authorizations for controlling the flow of information within the network based on organization-defined information flow control policies.
  • V-60821CAT IIThe Arista Multilayer Switch must enforce approved authorizations for controlling the flow of information between interconnected systems based on organization-defined information flow control policies.
  • V-60823CAT IIThe Arista Multilayer Switch must uniquely identify all network-connected endpoint devices before establishing any connection.
  • V-60825CAT IIThe Arista Multilayer Switch must authenticate all endpoint devices before establishing a network connection using bidirectional authentication that is cryptographically based.
  • V-60827CAT IIThe Arista Multilayer Switch must re-authenticate all endpoint devices every 60 minutes or less.
  • V-60829CAT IIThe Arista Multilayer Switch must re-authenticate 802.1X connected devices every hour.
  • V-60831CAT IIThe Arista Multilayer Switch must authenticate 802.1X connected devices before establishing any connection.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R3 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.