STIGQter: STIG Summary: HPE Aruba Networking AOS NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 22 Oct 2024:

AOS must be configured to protect against known types of denial-of-service (DoS) attacks by employing organization-defined security safeguards.

DISA Rule

SV-266961r1039904_rule

Vulnerability Number

V-266961

Group Title

SRG-APP-000435-NDM-000315

Rule Version

ARBA-ND-000315

Severity

CAT II

CCI(s)

• CCI-002385 - Protect against or limit the effects of organization-defined types of denial of service events.

Weight

10

Fix Recommendation

Configure AOS using the web interface:

Navigate to Configuration >> Services >> Firewall and enable DoS protection in accordance with organization-defined policy.

Click Submit >> Pending Changes >> Deploy Changes.

Check Contents

Verify the AOS configuration using the web interface:

Navigate to Configuration >> Services >> Firewall.

If the organization-defined safeguards are not enabled to protect against known DoS attacks, this is a finding.

Vulnerability Number

V-266961

Documentable

False

Rule Version

ARBA-ND-000315

Severity Override Guidance

Verify the AOS configuration using the web interface:

Navigate to Configuration >> Services >> Firewall.

If the organization-defined safeguards are not enabled to protect against known DoS attacks, this is a finding.

Check Content Reference

M

Target Key

5648