Network Infrastructure Policy Security Technical Implementation Guide

The Network Infrastructure Policy Security Technical Implementation Guide (V10 R7) has 67 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

67STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V10 · R7

CurrentPublished Thu Oct 24 2024

Current and previous network element configurations must be stored in a secured location.

Network Infrastructure Policy Security Technical Implementation Guide

Assessment Title

Rule Text

Current and previous network element configurations must be stored in a secured location.

Description

Discussion Text

If the network element's non-volatile memory is lost without a recent configuration stored in an offline location, it may take time to recover that segment of the network. Users connected directly to the switch or router will be without service for a longer than acceptable time.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-251375

Rule

SV-251375r853654_rule

Severity

low

Rule Version

NET1040

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

At a minimum, a copy of the current and previous network element configurations must be saved.  Storage can take place on a classified network, OOB network, or offline.

If the current and previous network element configurations are not stored in a secured location, this is a finding.

Implementation Procedure

Fix Text

The network administrator will store the current and previous router and switch configurations in a secure location. Storage can take place on a classified network, OOB network, or offline.  Configurations can only be accessed by server or network admin.

STIG check 43 of 67 in the Network Infrastructure Policy STIG checklist

← Previous · V-251374Syslog messages must be retained for a minimum of 30 days online and then stored offline for one year.Next · V-251376 →The organization must encrypt all network device configurations while stored offline.