STIGQter: STIG Summary: RUCKUS ICX Router Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 27 May 2025:

The RUCKUS ICX BGP router must be configured to reject inbound route advertisements for any prefixes belonging to the local autonomous system (AS).

DISA Rule

SV-273571r1110907_rule

Vulnerability Number

V-273571

Group Title

SRG-NET-000018-RTR-000003

Rule Version

RCKS-RTR-000030

Severity

CAT II

CCI(s)

CCI-001368 - Enforce approved authorizations for controlling the flow of information within the system based on organization-defined information flow control policies.

Weight

Fix Recommendation

Remove the command "neighbor x.x.x.x allowas-in" where found in the BGP neighbor configuration.

Check Contents

Review BGP neighbor configuration using "show running-config | begin router bgp".

If any BGP neighbor is configured for the "neighbor x.x.x. allowas-in" command, this is a finding.

Vulnerability Number

V-273571

Documentable

False

Rule Version

RCKS-RTR-000030

Severity Override Guidance

Review BGP neighbor configuration using "show running-config | begin router bgp".

If any BGP neighbor is configured for the "neighbor x.x.x. allowas-in" command, this is a finding.

Check Content Reference

Target Key

5696