STIGQter: STIG Summary: AAA Services Security Requirements Guide Version: 2 Release: 2 Benchmark Date: 30 Jan 2025:

AAA Services must be configured to use IP segments separate from production VLAN IP segments.

DISA Rule

SV-204702r961863_rule

Vulnerability Number

V-204702

Group Title

SRG-APP-000516

Rule Version

SRG-APP-000516-AAA-000650

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure AAA Services to use IP segments separate from production VLAN IP segments.

Check Contents

If AAA Services are not used for 802.1x authentication or to authenticate privileged users for device management, this is not applicable.

Verify AAA Services are configured to use IP segments separate from production VLAN IP segments.

If AAA Services are not configured to use IP segments separate from production VLAN IP segments, this is a finding.

Vulnerability Number

V-204702

Documentable

False

Rule Version

SRG-APP-000516-AAA-000650

Severity Override Guidance

If AAA Services are not used for 802.1x authentication or to authenticate privileged users for device management, this is not applicable.

Verify AAA Services are configured to use IP segments separate from production VLAN IP segments.

If AAA Services are not configured to use IP segments separate from production VLAN IP segments, this is a finding.

Check Content Reference

M

Target Key

2896