STIGQter: STIG Summary: NetApp ONTAP DSC 9.x Security Technical Implementation Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

ONTAP must implement replay-resistant authentication mechanisms for network access to privileged accounts.

DISA Rule

SV-246948r1211039_rule

Vulnerability Number

V-246948

Group Title

SRG-APP-000156-NDM-000250

Rule Version

NAOT-IA-000002

Severity

CAT II

CCI(s)

• CCI-001941 - Implement replay-resistant authentication mechanisms for access to privileged accounts and/or non-privileged accounts.

Weight

10

Fix Recommendation

Configure new administrator active directory users or groups with "security login create -user-or-group-name <user_name> -role admin -authentication-method domain".

Check Contents

Use "security login show -role admin" to see all configured admin users and groups.

If any account, other than the admin account used as the account of last resort, has an authentication method password, this is a finding.

Vulnerability Number

V-246948

Documentable

False

Rule Version

NAOT-IA-000002

Severity Override Guidance

Use "security login show -role admin" to see all configured admin users and groups.

If any account, other than the admin account used as the account of last resort, has an authentication method password, this is a finding.

Check Content Reference

M

Target Key

5415