Skip to content

Riverbed NetProfiler Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000069-NDM-000216

    <GroupDescription></GroupDescription>
    Group
  • The Riverbed NetProfiler must be configured to retain the Standard Mandatory DOD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access.

    &lt;VulnDiscussion&gt;The administrator must acknowledge the banner prior to the device allowing the administrator access to the network device. Th...
    Rule Medium Severity
  • SRG-APP-000080-NDM-000345

    <GroupDescription></GroupDescription>
    Group
  • The Riverbed NetProfiler must change the default admin credentials so they do not use the default manufacturer passwords when deployed.

    &lt;VulnDiscussion&gt;Network devices not protected with strong password schemes provide the opportunity for anyone to crack the password and gain ...
    Rule High Severity
  • SRG-APP-000142-NDM-000245

    <GroupDescription></GroupDescription>
    Group
  • The Riverbed NetProfiler must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.

    &lt;VulnDiscussion&gt;Authentication for administrative (privileged-level) access to the device is required at all times. An account can be created...
    Rule Medium Severity
  • SRG-APP-000153-NDM-000249

    <GroupDescription></GroupDescription>
    Group
  • The Riverbed NetProfiler must be configured to authenticate each administrator prior to authorizing privileges based on roles.

    &lt;VulnDiscussion&gt;The lack of role-based access control could result in the immediate compromise of and unauthorized access to sensitive inform...
    Rule High Severity
  • SRG-APP-000164-NDM-000252

    <GroupDescription></GroupDescription>
    Group
  • The Riverbed NetProfiler must be configured to enforce a minimum 15-character password length.

    &lt;VulnDiscussion&gt;Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules