What changed in Riverbed NetProfiler STIG V2R1V2R1 changes

Riverbed NetProfiler STIG V2R1 (2024-07-24) replaced V1R1 (2023-02-08): 2 checks removed, 11 updated. It has 25 checks, against 27 in V1R1.

V2R1 checklistV1R1 checklist Compare V1R1 and V2R1 in STIG Compare

  • 0 added
  • 2 removed
  • 11 updated

Updated fields: CCIs 11

Removed since V1R1 (2)

  • V-256076CAT IThe Riverbed NetProfiler must change the default admin credentials so they do not use the default manufacturer passwords when deployed.
  • V-256083CAT IIThe Riverbed NetProfiler must be configured to terminate all sessions and network connections when nonlocal device maintenance is completed.

Updated in V2R1 (11)

V-256072CAT IThe Riverbed NetProfiler must be configured to automatically generate DOD-required audit records with sufficient information to support incident reporting to a central log server.CCIs

CCIs

CCI-000018,CCI-000130,CCI-000131,CCI-000132,CCI-000133,CCI-000134,CCI-000135,CCI-000166,CCI-000172,CCI-001403,CCI-001404,CCI-001405,CCI-001464,CCI-001487,CCI-001814003938,CCI-002234,CCI-002605

V-256072 in V2R1

V-256079CAT IThe Riverbed NetProfiler must be configured to authenticate each administrator prior to authorizing privileges based on roles.CCIs

CCIs

CCI-000163,CCI-000164,CCI-000166,CCI-000187,CCI-000213,CCI-000366,CCI-000370,CCI-000764,CCI-004077045,CCI-001493,CCI-001494,CCI-001495,CCI-002169

V-256079 in V2R1

V-256080CAT IIThe Riverbed NetProfiler must be configured to enforce a minimum 15-character password length.CCIs

CCIs

CCI-000195,CCI-000205CCI-004066

V-256080 in V2R1

V-256081CAT IIThe Riverbed NetProfiler must configure the local account password to "require mixed case".CCIs

CCIs

CCI-004019266

V-256081 in V2R1

V-256082CAT IIThe Riverbed NetProfiler must require that at least one special character be used.CCIs

CCIs

CCI-001406196

V-256082 in V2R1

V-256085CAT IIThe Riverbed NetProfiler must be configured to synchronize internal information system clocks using redundant authoritative time sources.CCIs

CCIs

CCI-000366,CCI-0014928,CCI-0049322

V-256085 in V2R1

V-256087CAT IIThe Riverbed NetProfiler must be configured to record time stamps for audit records that meet a granularity of one second for a minimum degree of precision.CCIs

CCIs

CCI-001889CCI-001889,CCI-004923

V-256087 in V2R1

V-256090CAT IThe Riverbed NetProfiler must be configured to implement cryptographic mechanisms using a FIPS 140-2/140-3 validated algorithm to protect the confidentiality and integrity of all cryptographic functions.CCIs

CCIs

CCI-00401962,CCI-000197,CCI-000803,CCI-001188,CCI-001941,CCI-002890,CCI-003123

V-256090 in V2R1

V-256093CAT IThe Riverbed NetProfiler must be configured to use an authentication server to authenticate users prior to granting administrative access.CCIs

CCIs

CCI-000366,CCI-000370CCI-000366,CCI-000370,CCI-003627,CCI-003628,CCI-003627,CCI-003628,CCI-004046,CCI-004047

V-256093 in V2R1

V-256094CAT IIThe Riverbed NetProfiler must be configured to obtain its public key certificates from an appropriate certificate policy through an approved service provider.CCIs

CCIs

CCI-000366,CCI-001159,CCI-004068

V-256094 in V2R1

V-256097CAT IIThe network device must terminate shared/group account credentials when members leave the group.CCIs

CCIs

CCI-002142045

V-256097 in V2R1

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V2R1 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.