Infrastructure Router Security Technical Implementation Guide

The Infrastructure Router Security Technical Implementation Guide (V8 R29) has 78 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

78STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V8 · R29

CurrentPublished Fri Jan 25 2019

Network devices must be configured to ensure passwords are not viewable when displaying configuration information.

Infrastructure Router Security Technical Implementation Guide

Assessment Title

Rule Text

Network devices must be configured to ensure passwords are not viewable when displaying configuration information.

Description

Discussion Text

Many attacks on information systems and network devices are launched from within the network. Hence, it is imperative that all passwords are encrypted so they cannot be intercepted by viewing the console or printout of the configuration.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-3062

Rule

SV-3062r4_rule

Severity

high

Rule Version

NET0600

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review the network devices configuration to determine if passwords are viewable.

If passwords are viewable in plaintext, this is a finding.

Implementation Procedure

Fix Text

Configure the network devices to ensure passwords are not viewable when displaying configuration information.

STIG check 53 of 78 in the Infrastructure Router STIG checklist

← Previous · V-30617Network devices must have a maximum hop limit of at least 32.Next · V-30660 →The administrator must ensure the 6-to-4 router is configured to drop any IPv4 packets with protocol 41 received from the internal network.