NetApp ONTAP DSC 9.x Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
ONTAP must enforce administrator privileges based on their defined roles.
To mitigate the risk of unauthorized access to sensitive information by entities that have been issued certificates by DoD-approved PKIs, all DoD systems must be properly configured to incorporate ...Rule High Severity -
SRG-APP-000340-NDM-000288
Group -
ONTAP must prevent non-privileged users from executing privileged functions to include disabling, circumventing, or altering implemented security safeguards/countermeasures.
Preventing non-privileged users from executing privileged functions mitigates the risk that unauthorized individuals or processes may gain unnecessary access to information or privileges. Privileg...Rule High Severity -
SRG-APP-000065-NDM-000214
Group -
ONTAP must be configured to enforce the limit of three consecutive failed logon attempts.
By limiting the number of failed login attempts, the risk of unauthorized system access via user password guessing, otherwise known as brute-forcing, is reduced.Rule Medium Severity -
SRG-APP-000068-NDM-000215
Group -
SRG-APP-000357-NDM-000293
Group -
SRG-APP-000360-NDM-000295
Group -
ONTAP must have audit guarantee enabled.
It is critical for the appropriate personnel to be aware if a system is at risk of failing to process audit logs as required. With audit guarantee enabled, all SMB operations must generate an audit...Rule Medium Severity -
SRG-APP-000373-NDM-000298
Group -
SRG-APP-000374-NDM-000299
Group -
ONTAP must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).
If time stamps are not consistently applied and there is no common time reference, it is difficult to perform forensic analysis. Time stamps generated by the application include date and time. Tim...Rule Medium Severity -
SRG-APP-000380-NDM-000304
Group -
SRG-APP-000516-NDM-000336
Group -
ONTAP must be configured to use an authentication server to provide multifactor authentication.
Centralized management of authentication settings increases the security of remote and nonlocal access methods. This control is particularly important protection against the insider threat. With ro...Rule High Severity -
SRG-APP-000516-NDM-000340
Group -
ONTAP must be configured to conduct backups of system level information.
System-level information includes default and customized settings and security attributes, including ACLs that relate to the network device configuration, as well as software required for the execu...Rule Medium Severity -
SRG-APP-000516-NDM-000344
Group -
ONTAP must use DoD-approved PKI rather than proprietary or self-signed device certificates.
Each organization obtains user certificates from an approved, shared service provider as required by OMB policy. For federal agencies operating a legacy public key infrastructure cross-certified wi...Rule Medium Severity -
SRG-APP-000142-NDM-000245
Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.