STIGQter: STIG Summary: Dell OS10 Switch NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 10 Dec 2024:

The Dell OS10 Switch must be configured to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services.

DISA Rule

SV-269776r1051713_rule

Vulnerability Number

V-269776

Group Title

SRG-APP-000142-NDM-000245

Rule Version

OS10-NDM-000340

Severity

CAT I

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

Configure the OS10 Switch to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services:

OS10(config)# no ip telnet server enable
OS10(config)# no rest api restconf
OS10(config)# eula-consent support-assist reject

Check Contents

Determine if the network device prohibits the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services.

Verify the configuration does not include unnecessary or nonsecure protocols and services:

ip telnet server enable
rest api restconf
eula-consent support-assist accept

If any unnecessary or nonsecure functions are permitted, this is a finding.

Vulnerability Number

V-269776

Documentable

False

Rule Version

OS10-NDM-000340

Severity Override Guidance

Determine if the network device prohibits the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services.

Verify the configuration does not include unnecessary or nonsecure protocols and services:

ip telnet server enable
rest api restconf
eula-consent support-assist accept

If any unnecessary or nonsecure functions are permitted, this is a finding.

Check Content Reference

M

Target Key

5666