STIGQter: STIG Summary: Arista MLS DCS-7000 Series NDM Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 25 Oct 2019:

The Arista Multilayer Switch must support organizational requirements to conduct backups of system-level information contained in the information system when changes occur or weekly, whichever is sooner.

DISA Rule

SV-75345r1_rule

Vulnerability Number

V-60887

Group Title

SRG-APP-000516-NDM-000340

Rule Version

AMLS-NM-000440

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.
• CCI-000537 - The organization conducts backups of system-level information contained in the information system per organization-defined frequency that is consistent with recovery time and recovery point objectives.

Weight

10

Fix Recommendation

Configure the network device to conduct backups of system-level information contained in the information system when changes occur or weekly, whichever is sooner.

For weekly backups, the following chronologically scheduled command will back up the switch information one per day at noon:

switch(config)#schedule [name] at [hh:mm:ss] interval 1440 max-log-files 100 command bash FastCli -p 15 -c $'enable\nshow tech-support > scp:[remote destination/filename]\n'

The following event-handler will schedule backups any time the configuration is changed and written to memory:

event-handler Copy-Config
trigger on-startup-config
action bash sudo ip netns exec ns-DATA scp /mnt/flash/startup-config [user@IPaddress/filepath/filename]
delay 5

Check Contents

Check the network device to determine if the network device is configured to conduct backups of system-level information contained in the information system when changes occur or weekly, whichever is sooner.

If the network device does not support the organizational requirements to conduct backups of system-level data according to the defined frequency, this is a finding.

Vulnerability Number

V-60887

Documentable

False

Rule Version

AMLS-NM-000440

Severity Override Guidance

Check the network device to determine if the network device is configured to conduct backups of system-level information contained in the information system when changes occur or weekly, whichever is sooner.

If the network device does not support the organizational requirements to conduct backups of system-level data according to the defined frequency, this is a finding.

Check Content Reference

M

Target Key

2825

Comments