Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The DBN-6300 must automatically audit account modification.
Description
Discussion Text
Upon gaining access to a network device, an attacker will often attempt to create a persistent method of reestablishing access. One way to accomplish this is to modify an account. This control does not apply to the account of last resort or root account. DoD prohibits local user accounts on the device, except for an account of last resort and (where applicable) a root account.
Account management functions include assignment of group or role membership; identifying account type; specifying user access authorizations (i.e., privileges); account removal, update, or termination; and administrative alerts.
With the DBN-6300, audit records are automatically backed up on a real-time basis via syslog when enabled.
Account management functions include assignment of group or role membership; identifying account type; specifying user access authorizations (i.e., privileges); account removal, update, or termination; and administrative alerts.
With the DBN-6300, audit records are automatically backed up on a real-time basis via syslog when enabled.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.