Skip to content

Cisco IOS Switch NDM Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000001-NDM-000200

    Group
  • SRG-APP-000026-NDM-000208

    Group
  • The Cisco switch must be configured to automatically audit account creation.

    Upon gaining access to a network device, an attacker will often first attempt to create a persistent method of reestablishing access. One way to accomplish this is to create a new account. Notifica...
    Rule Medium Severity
  • SRG-APP-000027-NDM-000209

    Group
  • SRG-APP-000028-NDM-000210

    Group
  • SRG-APP-000029-NDM-000211

    Group
  • The Cisco switch must be configured to automatically audit account removal actions.

    Account management, as a whole, ensures access to the network device is being controlled in a secure manner by granting access to only authorized personnel. Auditing account removal actions will su...
    Rule Medium Severity
  • SRG-APP-000038-NDM-000213

    Group
  • SRG-APP-000065-NDM-000214

    Group
  • SRG-APP-000068-NDM-000215

    Group
  • SRG-APP-000080-NDM-000220

    Group
  • The Cisco device must be configured to audit all administrator activity.

    This requirement supports non-repudiation of actions taken by an administrator and is required to maintain the integrity of the configuration management process. All configuration changes to the ne...
    Rule Medium Severity
  • SRG-APP-000096-NDM-000226

    Group
  • SRG-APP-000097-NDM-000227

    Group
  • SRG-APP-000101-NDM-000231

    Group
  • SRG-APP-000119-NDM-000236

    Group
  • SRG-APP-000120-NDM-000237

    Group
  • SRG-APP-000133-NDM-000244

    Group
  • SRG-APP-000142-NDM-000245

    Group
  • SRG-APP-000148-NDM-000346

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules