II - Mission Support Sensitive
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000097-NDM-000227
Group -
The Cisco router must produce audit records containing information to establish where the events occurred.
In order to compile an accurate risk assessment and provide forensic analysis, it is essential for security personnel to know where events occurred, such as device hardware components, device softw...Rule Medium Severity -
SRG-APP-000142-NDM-000245
Group -
The Cisco router must be configured to be configured to prohibit the use of all unnecessary and nonsecure functions and services.
Network devices are capable of providing a wide variety of functions and services. Some of the functions and services provided by default may not be necessary to support essential organizational op...Rule High Severity -
SRG-APP-000148-NDM-000346
Group -
The Cisco router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.
Authentication for administrative (privileged level) access to the device is required at all times. An account can be created on the device's local database for use when the authentication server i...Rule Medium Severity -
SRG-APP-000156-NDM-000250
Group -
The Cisco router must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts.
A replay attack may enable an unauthorized user to gain access to the application. Authentication sessions between the authenticator and the application validating the user credentials must not be ...Rule Medium Severity -
SRG-APP-000190-NDM-000267
Group -
The Cisco router must be configured to terminate all network connections associated with device management after five minutes of inactivity.
Terminating an idle session within a short time period reduces the window of opportunity for unauthorized personnel to take control of a management session enabled on the console or console port th...Rule High Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.