Network Device Management Security Requirements Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
The network device must protect audit tools from unauthorized deletion.
<VulnDiscussion>Protecting audit data also includes identifying and protecting the tools used to view and manipulate log data. Therefore, pro...Rule Medium Severity -
SRG-APP-000131
<GroupDescription></GroupDescription>Group -
The network device must prevent the installation of patches, service packs, or application components without verification the software component has been digitally signed using a certificate that is recognized and approved by the organization.
<VulnDiscussion>Changes to any software components can have significant effects on the overall security of the network device. Verifying soft...Rule Medium Severity -
SRG-APP-000133
<GroupDescription></GroupDescription>Group -
The network device must limit privileges to change the software resident within software libraries.
<VulnDiscussion>Changes to any software components of the network device can have significant effects on the overall security of the network....Rule Medium Severity -
The network device must be configured to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services
<VulnDiscussion>In order to prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e....Rule High Severity -
SRG-APP-000148
<GroupDescription></GroupDescription>Group -
The network device must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.
<VulnDiscussion>Authentication for administrative (privileged level) access to the device is required at all times. An account can be created...Rule Medium Severity -
SRG-APP-000153
<GroupDescription></GroupDescription>Group -
The network device must be configured to authenticate each administrator prior to authorizing privileges based on assignment of group or role.
<VulnDiscussion>To ensure individual accountability and prevent unauthorized access, administrators must be individually identified and authe...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.