STIGQter: STIG Summary: Network Device Management Security Requirements Guide Version: 5 Release: 5 Benchmark Date: 01 Jul 2026:

The network device must be configured to implement certificate revocation checking to support path discovery and validation for public key-based authentication.

DISA Rule

SV-264303r1067639_rule

Vulnerability Number

V-264303

Group Title

SRG-APP-000875

Rule Version

SRG-APP-000875-NDM-000280

Severity

CAT II

CCI(s)

• CCI-004068 - For public key-based authentication, implement a local cache of revocation data to support path discovery and validation.

Weight

10

Fix Recommendation

Configure the network device to implement certificate revocation checking to support path discovery and validation using CRL or OCSP.

Check Contents

Verify the network device is configured to implement certificate revocation checking to support path discovery and validation.

If the network device is not configured to implement certificate revocation checking to support path discovery and validation, this is a finding.

Vulnerability Number

V-264303

Documentable

False

Rule Version

SRG-APP-000875-NDM-000280

Severity Override Guidance

Verify the network device is configured to implement certificate revocation checking to support path discovery and validation.

If the network device is not configured to implement certificate revocation checking to support path discovery and validation, this is a finding.

Check Content Reference

M

Target Key

2890