| Checked | Name | Title |
|---|
| ☐ | SV-283358r1194768_rule | The HPE Alletra Storage ArcusOS device must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the device. |
| ☐ | SV-283377r1194825_rule | The HPE Alletra Storage ArcusOS device must be configured to prohibit using all unnecessary and/or nonsecure ports, protocols, and/or services. |
| ☐ | SV-283378r1194828_rule | The HPE Alletra Storage ArcusOS device must be configured with only one local interactive account to be used as the account of last resort in the event the authentication server is unavailable. |
| ☐ | SV-283381r1194837_rule | The HPE Alletra Storage ArcusOS device must enforce a minimum 15-character password length. |
| ☐ | SV-283382r1194840_rule | The HPE Alletra Storage ArcusOS device must enforce password complexity by requiring at least one uppercase character, one lowercase character, one numeric character, and one special character be used. |
| ☐ | SV-283387r1194855_rule | The HPE Alletra Storage ArcusOS device must use FIPS 140-approved algorithms for authentication to a cryptographic module. |
| ☐ | SV-283388r1194858_rule | The HPE Alletra Storage ArcusOS device must terminate all network connections at the end of the session, or the session must be terminated after five minutes of inactivity, except to fulfill documented and validated mission requirements. |
| ☐ | SV-283400r1194894_rule | The HPE Alletra Storage ArcusOS device must allocate audit record storage capacity in accordance with organization-defined audit record storage requirements. |
| ☐ | SV-283401r1194897_rule | The HPE Alletra Storage ArcusOS device must allocate a set number of audit records that can be stored on the system in accordance with organization-defined audit record storage requirements. |
| ☐ | SV-283402r1194900_rule | The HPE Alletra Storage ArcusOS device must have an SNMPv3 user account configured. |
| ☐ | SV-283403r1194903_rule | The HPE Alletra Storage ArcusOS device must be configured to collect and send SNMPv3 notifications. |
| ☐ | SV-283404r1194906_rule | The HPE Alletra Storage ArcusOS device must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT). |
| ☐ | SV-283409r1194921_rule | The HPE Alletra Storage ArcusOS device must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC). |
| ☐ | SV-283410r1194924_rule | The HPE Alletra Storage ArcusOS device must authenticate Network Time Protocol (NTP) sources using authentication that is cryptographically based. |
| ☐ | SV-283414r1194936_rule | The HPE Alletra Storage ArcusOS device must install security-relevant firmware updates within 30 days unless the time period is directed by an authoritative source (e.g., IAVM, CTOs, DTMs, STIGs). |
| ☐ | SV-283425r1194969_rule | The HPE Alletra Storage ArcusOS device must be configured to use at least two authentication servers for the purpose of authenticating users prior to granting administrative access. |
| ☐ | SV-283429r1194981_rule | The HPE Alletra Storage ArcusOS device must be configured to send log data to at least one central log server for the purpose of forwarding alerts to the administrators and the information system security officer (ISSO). For boundary devices, two log servers are required. |
| ☐ | SV-283430r1194984_rule | The HPE Alletra Storage ArcusOS device must be running an operating system release that is currently supported by the vendor. |
| ☐ | SV-283437r1195005_rule | The HPE Alletra Storage ArcusOS device must be configured to protect nonlocal maintenance sessions by separating the maintenance session from other network sessions with the system by logically separated communications paths. |
STIGQter: STIG Summary: