STIGQter: STIG Summary: Network Device Management Security Requirements Guide Version: 5 Release: 5 Benchmark Date: 01 Jul 2026:

The network device must be configured to use at least one authentication server for the purpose of authenticating users prior to granting administrative access. For boundary devices, two authentication servers are required.

DISA Rule

SV-202132r1137887_rule

Vulnerability Number

V-202132

Group Title

SRG-APP-000516

Rule Version

SRG-APP-000516-NDM-000336

Severity

CAT I

CCI(s)

• CCI-000370 - Manage configuration settings for organization-defined system components using organization-defined automated mechanisms.

Weight

10

Fix Recommendation

1. Configure the network device to use at least one authentication server or configure the network boundary device to use at least two authentication servers.
2. Configure the authentication order to use the authentication servers as primary source for authentication.
3. Configure all network connections associated with a device management to use the authentication servers for the purpose of login authentication.

Check Contents

Review the network device configuration to verify that the device is configured to use at least one authentication server as a primary source for authentication. For boundary devices, verify that the device is configured to use at least two authentication servers for authentication.

If the network device is not configured to use at least one authentication server for the purpose of authenticating users prior to granting administrative access, this is a finding.

If the network boundary device is not configured to use at least two authentication servers for the purpose of authenticating users prior to granting administrative access, this is a finding.

Vulnerability Number

V-202132

Documentable

False

Rule Version

SRG-APP-000516-NDM-000336

Severity Override Guidance

Review the network device configuration to verify that the device is configured to use at least one authentication server as a primary source for authentication. For boundary devices, verify that the device is configured to use at least two authentication servers for authentication.

If the network device is not configured to use at least one authentication server for the purpose of authenticating users prior to granting administrative access, this is a finding.

If the network boundary device is not configured to use at least two authentication servers for the purpose of authenticating users prior to granting administrative access, this is a finding.

Check Content Reference

M

Target Key

2890