STIGQter: STIG Summary: Riverbed NetProfiler Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The Riverbed NetProfiler must be configured to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services.

DISA Rule

SV-256077r960966_rule

Vulnerability Number

V-256077

Group Title

SRG-APP-000142-NDM-000245

Rule Version

RINP-DM-000026

Severity

CAT II

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

Remove unused or unnecessary services that are not being used.

Example: If the AUX port is not being used, go to the Configuration >> General Settings page, AUX interface configuration section, and deselect the "Configure AUX Interface" option. This disables the AUX interface.

If any static routes were added for the configuration that are no longer needed, remove them in the Static Routes section.

Check Contents

Work with the site representative to identify unnecessary and/or nonsecure functions, ports, protocols, and/or services that are enabled.

If unnecessary and/or nonsecure functions, ports, protocols, and/or services are enabled, this is a finding.

Vulnerability Number

V-256077

Documentable

False

Rule Version

RINP-DM-000026

Severity Override Guidance

Work with the site representative to identify unnecessary and/or nonsecure functions, ports, protocols, and/or services that are enabled.

If unnecessary and/or nonsecure functions, ports, protocols, and/or services are enabled, this is a finding.

Check Content Reference

M

Target Key

5514