Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The Cisco ACI must be configured to assign appropriate user roles or access levels to authenticated users.
Description
Discussion Text
Successful identification and authentication must not automatically give an entity full access to a Cisco ACI or security domain. The lack of authorization-based access control could result in the immediate compromise of, and unauthorized access to, sensitive information. All DOD systems must be properly configured to incorporate access control methods that do not rely solely on authentication for authorized access.
There are multiple ways to provide this function so the site should be prepared to demonstrate in the "Users" section that different accounts have different AV pairs, domains, or roles.
Satisfies: SRG-APP-000033-NDM-000212, SRG-APP-000329-NDM-000287, SRG-APP-000177-NDM-000263, SRG-APP-000910-NDM-000300
There are multiple ways to provide this function so the site should be prepared to demonstrate in the "Users" section that different accounts have different AV pairs, domains, or roles.
Satisfies: SRG-APP-000033-NDM-000212, SRG-APP-000329-NDM-000287, SRG-APP-000177-NDM-000263, SRG-APP-000910-NDM-000300
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.