Network Devices Security Technical Implementation Guide

The Network Devices Security Technical Implementation Guide (V8 R23) has 63 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

63STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V8 · R23

CurrentPublished Fri Jan 25 2019

The TFTP server used to store network element configurations and images must be only connected to the management network.

Network Devices Security Technical Implementation Guide

Assessment Title

Rule Text

The TFTP server used to store network element configurations and images must be only connected to the management network.

Description

Discussion Text

TFTP that contains network element configurations and images must only be connected to the management network to enforce restricted and limited access.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-5644

Rule

SV-5644r2_rule

Severity

medium

Rule Version

NET1071

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review the layer 2 and layer 3 network topology to determine what network the TFTP server is connected to. Verify that the server has been configured or assigned an IP address that belongs to the management network.

Implementation Procedure

Fix Text

Connect the TFTP server only to the management network.

STIG check 60 of 63 in the Network Devices STIG checklist

← Previous · V-5613The network device must be configured for a maximum number of unsuccessful SSH logon attempts set at 3 before resetting the interface.Next · V-5646 →The network device must drop half-open TCP connections through filtering thresholds or timeout periods.