STIGQter: STIG Summary: Riverbed SteelHead CX v8 NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 25 Oct 2019:

Riverbed Optimization System (RiOS) must back up the system configuration files when configuration changes are made to the device.

DISA Rule

SV-77441r1_rule

Vulnerability Number

V-62951

Group Title

SRG-APP-000516-NDM-000341

Rule Version

RICX-DM-000100

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.
• CCI-000539 - The organization conducts backups of information system documentation, including security-related documentation, per an organization-defined frequency that is consistent with recovery time and recovery point objectives.

Weight

10

Fix Recommendation

When changes are made to the system configuration, using the following procedure for backing up the device.

Navigate to the device Management Console
Navigate to Configure >> Configurations
Set the value of "New Configuration Name:" to the naming standards for the organization backups
Click "Save"

Verify that the saved configuration shows up under "Configuration" and the "Date" is the current date and time

Check Contents

Verify that RiOS is backed up when system configuration changes are made to the device by interviewing the site representative and checking any existing backup log. Evidence may also be provided by the date of the last back up.

Navigate to the device Management Console
Navigate to Configure >> Configurations

Verify that the table for "Configuration" and "Date" contains backup configurations

If there are no entries under "Configuration" and "Date", this is a finding.

Vulnerability Number

V-62951

Documentable

False

Rule Version

RICX-DM-000100

Severity Override Guidance

Verify that RiOS is backed up when system configuration changes are made to the device by interviewing the site representative and checking any existing backup log. Evidence may also be provided by the date of the last back up.

Navigate to the device Management Console
Navigate to Configure >> Configurations

Verify that the table for "Configuration" and "Date" contains backup configurations

If there are no entries under "Configuration" and "Date", this is a finding.

Check Content Reference

M

Target Key

2931

Comments