Skip to content
ATO Pathways
  Log In

I - Mission Critical Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-NET-000362-RTR-000118

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Juniper BGP router must be configured to limit the prefix size on any inbound route advertisement to /24 or the least significant prefixes issued to the customer.

    &lt;VulnDiscussion&gt;The effects of prefix de-aggregation can degrade router performance due to the size of routing tables and also result in blac...
    Rule Low Severity
    Show

  • SRG-NET-000512-RTR-000001

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Juniper BGP router must be configured to use its loopback address as the source address for iBGP peering sessions.

    &lt;VulnDiscussion&gt;Using a loopback address as the source address offers a multitude of uses for security, access, management, and scalability o...
    Rule Low Severity
    Show

  • SRG-NET-000512-RTR-000002

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Juniper MPLS router must be configured to use its loopback address as the source address for LDP peering sessions.

    &lt;VulnDiscussion&gt;Using a loopback address as the source address offers a multitude of uses for security, access, management, and scalability o...
    Rule Low Severity
    Show

  • SRG-NET-000512-RTR-000003

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Juniper MPLS router must be configured to synchronize IGP and LDP to minimize packet loss when an IGP adjacency is established prior to LDP peers completing label exchange.

    &lt;VulnDiscussion&gt;Packet loss can occur when an IGP adjacency is established and the router begins forwarding packets using the new adjacency b...
    Rule Low Severity
    Show

  • SRG-NET-000193-RTR-000001

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Juniper MPLS router with RSVP-TE enabled must be configured to enable refresh reduction features.

    &lt;VulnDiscussion&gt;RSVP-TE can be used to perform constraint-based routing when building LSP tunnels within the network core that will support Q...
    Rule Low Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules