Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The Cisco switch must have Storm Control configured on all host-facing switchports.
Description
Discussion Text
A traffic storm occurs when packets flood a LAN, creating excessive traffic and degrading network performance. Traffic storm control prevents network disruption by suppressing ingress traffic when the number of packets reaches a configured threshold level.
Traffic storm control monitors ingress traffic levels on a port and drops traffic when the number of packets reaches the configured threshold level during any one-second interval.
The primary intent of this control is to mitigate the risk of denial-of-service (DoS) attacks, not to arbitrarily restrict bandwidth needed for operations. Consequently, some ports may be configured to operate at full line-rate speed if deemed necessary by the engineer to meet mission requirements. The ultimate responsibility for managing bandwidth to prevent a DoS while ensuring service availability rests with the network engineer.
Traffic storm control monitors ingress traffic levels on a port and drops traffic when the number of packets reaches the configured threshold level during any one-second interval.
The primary intent of this control is to mitigate the risk of denial-of-service (DoS) attacks, not to arbitrarily restrict bandwidth needed for operations. Consequently, some ports may be configured to operate at full line-rate speed if deemed necessary by the engineer to meet mission requirements. The ultimate responsibility for managing bandwidth to prevent a DoS while ensuring service availability rests with the network engineer.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.