STIGQter: STIG Summary: Network Infrastructure Policy Security Technical Implementation Guide Version: 10 Release: 7 Benchmark Date: 24 Oct 2024:

A dedicated management network must be implemented.

DISA Rule

SV-251372r806071_rule

Vulnerability Number

V-251372

Group Title

NET0998

Rule Version

NET0998

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Define a large enough address block that will enable the management network to scale in proportion to the managed network.

Check Contents

Review the network topology diagram to determine if a management network has been implemented. Validate the IP address space documented for this network by verifying the IP addresses referenced for management access (SSH, NTP, AAA, SNMP manager, Syslog server, etc.) to the managed network elements.

If a management network has not been implemented, this is a finding.

Vulnerability Number

V-251372

Documentable

False

Rule Version

NET0998

Severity Override Guidance

Review the network topology diagram to determine if a management network has been implemented. Validate the IP address space documented for this network by verifying the IP addresses referenced for management access (SSH, NTP, AAA, SNMP manager, Syslog server, etc.) to the managed network elements.

If a management network has not been implemented, this is a finding.

Check Content Reference

M

Target Key

5444