STIGQter: STIG Summary: Riverbed NetIM NDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2025:

The Riverbed NetIM must support organizational requirements to back up the NetIM application and security configuration when changes occur.

DISA Rule

SV-275462r1147436_rule

Vulnerability Number

V-275462

Group Title

SRG-APP-000516-NDM-000340

Rule Version

RIIM-DM-000016

Severity

CAT II

CCI(s)

• CCI-000537 - Conduct backups of system-level information contained in the system per organization-defined frequency that is consistent with recovery time and recovery point objectives.

Weight

10

Fix Recommendation

Manually back up the application when changes occur in accordance with the SSP. This requirement normally gives an option for weekly, however since the backup requires the halting of system processes, weekly may not be operationally possible.

1. From the NetIM core/manager node, navigate to <install_dir >, by entering a command similar to the following:

cd /data1/riverbed/NetIM/<install_dir >

2. Log in to the shell of each node and run the following command:

$ app.sh SAVE_RESTORE export <path to directory for exporting zip file >

<path to directory for exporting zip file > = backup repository that is off the NETIM hosts.

Note: VM snapshots of each node may be preferred by the site and are an acceptable alternative mitigation.

Check Contents

Review the system security plan (SSP) to determine the site's network device backup policy.

Check the backup log repository identified by the site. Verify regular backups are being performed.

If NetIM does not backup the information system documentation, including security-related documentation, when changes occur, this is a finding.

Vulnerability Number

V-275462

Documentable

False

Rule Version

RIIM-DM-000016

Severity Override Guidance

Review the system security plan (SSP) to determine the site's network device backup policy.

Check the backup log repository identified by the site. Verify regular backups are being performed.

If NetIM does not backup the information system documentation, including security-related documentation, when changes occur, this is a finding.

Check Content Reference

M

Target Key

5704