Network Infrastructure Policy Security Technical Implementation Guide

The Network Infrastructure Policy Security Technical Implementation Guide (V10 R7) has 67 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

67STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V10 · R7

CurrentPublished Thu Oct 24 2024

A dedicated management network must be implemented.

Network Infrastructure Policy Security Technical Implementation Guide

Assessment Title

Rule Text

A dedicated management network must be implemented.

Description

Discussion Text

To deploy a management network for the purpose of controlling, monitoring, and restricting management traffic, a separate management subnet must be implemented. Define a large enough address block that will enable the management network to scale in proportion to the managed network.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-251372

Rule

SV-251372r806071_rule

Severity

medium

Rule Version

NET0998

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review the network topology diagram to determine if a management network has been implemented. Validate the IP address space documented for this network by verifying the IP addresses referenced for management access (SSH, NTP, AAA, SNMP manager, Syslog server, etc.) to the managed network elements.

If a management network has not been implemented, this is a finding.

Implementation Procedure

Fix Text

Define a large enough address block that will enable the management network to scale in proportion to the managed network.

STIG check 40 of 67 in the Network Infrastructure Policy STIG checklist

← Previous · V-251371A policy must be implemented to keep Bogon/Martian rulesets up to date.Next · V-251373 →A minimum of two syslog servers must be deployed in the management network.