STIGQter: STIG Summary: Arista MLS EOS 4.X Router Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 02 Apr 2025:

The Arista router must not be configured to have any zero-touch deployment feature enabled when connected to an operational network.

DISA Rule

SV-256029r882429_rule

Vulnerability Number

V-256029

Group Title

SRG-NET-000362-RTR-000109

Rule Version

ARST-RT-000490

Severity

CAT II

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Disable all configuration auto-loading or zero-touch deployment features.

LEAF-1A(config)#zerotouch disable

Check Contents

Review the Arista MLS device configuration to determine if a configuration auto-loading or zero-touch deployment feature is enabled.

Execute the command "sh zerotouch".

Zerotouch Mode: Disabled

If a configuration auto-loading feature or zero-touch deployment feature is enabled, this is a finding.

Vulnerability Number

V-256029

Documentable

False

Rule Version

ARST-RT-000490

Severity Override Guidance

Review the Arista MLS device configuration to determine if a configuration auto-loading or zero-touch deployment feature is enabled.

Execute the command "sh zerotouch".

Zerotouch Mode: Disabled

If a configuration auto-loading feature or zero-touch deployment feature is enabled, this is a finding.

Check Content Reference

M

Target Key

5513