STIGQter: STIG Summary: NetApp ONTAP DSC 9.x Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

ONTAP must be configured to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services.

DISA Rule

SV-246946r1043177_rule

Vulnerability Number

V-246946

Group Title

SRG-APP-000142-NDM-000245

Rule Version

NAOT-CM-000009

Severity

CAT I

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.
• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Configure logical interfaces to use service policies with "network interface modify -service-policy <service_policy_name> -lif <logical_interface_name>".

Check Contents

Use "network interface service-policy show" to see all of the configured service policies defined in ONTAP.

Use "network interface show -fields service-policy" to see which network logical interfaces (LIFs) have which service policies configured.

If ONTAP does not have service policies defined for each interface, this is a finding.

Vulnerability Number

V-246946

Documentable

False

Rule Version

NAOT-CM-000009

Severity Override Guidance

Use "network interface service-policy show" to see all of the configured service policies defined in ONTAP.

Use "network interface show -fields service-policy" to see which network logical interfaces (LIFs) have which service policies configured.

If ONTAP does not have service policies defined for each interface, this is a finding.

Check Content Reference

M

Target Key

5415