STIGQter STIGQter: STIG Summary: Arista MLS EOS 4.X NDM Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

The network device must be configured to conduct backups of system level information contained in the information system when changes occur.

DISA Rule

SV-255964r961863_rule

Vulnerability Number

V-255964

Group Title

SRG-APP-000516-NDM-000340

Rule Version

ARST-ND-000820

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Configure the Arista network device with an “event-handler” to complete an incremental backup of the running configuration, which can be maintained in the switch flash memory stored in /mnt/flash/startup-config_directory (filetime):

switch#config
switch(config)#event-handler CFG_BACKUP
switch(config-handler-CFG_BACKUP)#trigger on-startup-config
switch(config-handler-CFG_BACKUP)#action bash buf () { filetime=$(date +%Y%m%d); cp /mnt/flash/startup-config /mnt/flash/startup-config_${filetime}; }; buf
switch(config-handler-CFG_BACKUP)#exit
switch(config)#exit
!

Check Contents

Verify the Arista network device is configured with an “event-handler” to complete an incremental backup of the running configuration, which can be maintained in the switch flash memory stored in /mnt/flash/startup-config_directory (filetime):

switch#show run | section event-handler
event-handler CFG_BACKUP
trigger on-startup-config
action bash buf () { filetime=$(date +%Y%m%d); cp /mnt/flash/startup-config /mnt/flash/startup-config_${filetime}; }; buf
!

If the Arista network device is not configured to conduct backups of system-level data when changes occur, this is a finding.

Vulnerability Number

V-255964

Documentable

False

Rule Version

ARST-ND-000820

Severity Override Guidance

Verify the Arista network device is configured with an “event-handler” to complete an incremental backup of the running configuration, which can be maintained in the switch flash memory stored in /mnt/flash/startup-config_directory (filetime):

switch#show run | section event-handler
event-handler CFG_BACKUP
trigger on-startup-config
action bash buf () { filetime=$(date +%Y%m%d); cp /mnt/flash/startup-config /mnt/flash/startup-config_${filetime}; }; buf
!

If the Arista network device is not configured to conduct backups of system-level data when changes occur, this is a finding.

Check Content Reference

M

Target Key

5511