STIGQter: STIG Summary: Riverbed NetProfiler Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 24 Jul 2024:

The Riverbed NetProfiler must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC).

DISA Rule

SV-256088r961506_rule

Vulnerability Number

V-256088

Group Title

SRG-APP-000395-NDM-000310

Rule Version

RINP-DM-000051

Severity

CAT II

CCI(s)

CCI-001967 - Authenticate organization-defined devices and/or types of devices before establishing a local, remote, and/or network connection using bidirectional authentication that is cryptographically based.

Weight

Fix Recommendation

Go to Administration >> Appliance Security >> Security Compliance.

Under "Operational Modes", enable "Strict Security Mode".

Check Contents

Go to Administration >> Appliance Security >> Security Compliance.

Under "Operational Modes", verify "Strict Security Mode" is enabled.

If it is not enabled, this is a finding.

Vulnerability Number

V-256088

Documentable

False

Rule Version

RINP-DM-000051

Severity Override Guidance

Go to Administration >> Appliance Security >> Security Compliance.

Under "Operational Modes", verify "Strict Security Mode" is enabled.

If it is not enabled, this is a finding.

Check Content Reference

Target Key

5514