Skip to content
Log In

Cisco IOS XR Router NDM Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000395-NDM-000310

    Group
    Show

  • The Cisco router must be configured to encrypt SNMP messages using a FIPS 140-2 approved algorithm.

    Without the strong encryption that is provided by the SNMP Version 3 User-based Security Model (USM), an unauthorized user can gain access to network management information that can be used to crea...
    Rule Medium Severity
    Show

  • SRG-APP-000395-NDM-000347

    Group
    Show

  • SRG-APP-000412-NDM-000331

    Group
    Show

  • The Cisco router must be configured to implement cryptographic mechanisms to protect the confidentiality of remote maintenance sessions.

    This requires the use of secure protocols instead of their unsecured counterparts, such as SSH instead of telnet, SCP instead of FTP, and HTTPS instead of HTTP. If unsecured protocols (lacking cryp...
    Rule High Severity
    Show

  • SRG-APP-000515-NDM-000325

    Group
    Show

  • The Cisco router must be configured to off-load log records onto a different system than the system being audited.

    Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity.
    Rule Medium Severity
    Show

  • SRG-APP-000516-NDM-000336

    Group
    Show

  • SRG-APP-000516-NDM-000340

    Group
    Show

  • The Cisco router must be configured to back up the configuration when changes occur.

    System-level information includes default and customized settings and security attributes, including ACLs that relate to the network device configuration, as well as software required for the execu...
    Rule Medium Severity
    Show

  • SRG-APP-000516-NDM-000344

    Group
    Show

  • SRG-APP-000516-NDM-000317

    Group
    Show

  • SRG-APP-000516-NDM-000317

    Group
    Show

  • The Cisco router must be running an IOS release that is currently supported by Cisco Systems.

    Network devices running an unsupported operating system lack current security fixes required to mitigate the risks associated with recent vulnerabilities. Running a supported release also enables o...
    Rule High Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules