STIGQter: STIG Summary: Cisco ACI NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 05 Jan 2026:

The Cisco ACI must conduct backups of the configuration weekly or at an organization-defined frequency and store on a separate device.

DISA Rule

SV-271921r1113817_rule

Vulnerability Number

V-271921

Group Title

SRG-APP-000516-NDM-000341

Rule Version

CACI-ND-000006

Severity

CAT II

CCI(s)

• CCI-000539 - Conduct backups of system documentation, including security-related documentation, per an organization-defined frequency that is consistent with recovery time and recovery point objectives.

Weight

10

Fix Recommendation

From the APIC GUI, create a remote location where the configuration will be stored:
1. Navigate to Admin >> Import/Export >> Remote Locations >> Create Remote Location.
2. Enable the global AES encryption setting and save the password in a secure location.
3. Fill out the rest of the form and click "Submit".

Create a Scheduler policy for weekly backups:
1. Navigate to Admin >> Schedulers >> Fabric >> Create Scheduler >> Create Trigger Scheduler.
2. Fill out the rest of the form and click "Submit".

Create a Configuration Export Policy:
1. Navigate to Admin >> Import/Export >> Export Policies >> Configuration >> Create Configuration Export Policy.
2. Fill out the rest of the form and click "Submit".

Check Contents

From the APIC GUI, verify backups are being performed as required:
1. Navigate to Admin >> Import/Export >> Export Policies >> Configuration >> Create Configuration Export Policy.
2. Fill out the rest of the form and click "Submit".

If the Cisco ACI is not configured to conduct backups of the configuration weekly or at an organization-defined frequency and stored on a separate device, this is a finding.

Vulnerability Number

V-271921

Documentable

False

Rule Version

CACI-ND-000006

Severity Override Guidance

From the APIC GUI, verify backups are being performed as required:
1. Navigate to Admin >> Import/Export >> Export Policies >> Configuration >> Create Configuration Export Policy.
2. Fill out the rest of the form and click "Submit".

If the Cisco ACI is not configured to conduct backups of the configuration weekly or at an organization-defined frequency and stored on a separate device, this is a finding.

Check Content Reference

M

Target Key

5682