| Checked | Name | Title |
|---|
| ☐ | SV-243171r879601_rule | The network device must enforce a minimum 15-character password length. |
| ☐ | SV-243172r879554_rule | The network device must not have any default manufacturer passwords when deployed. |
| ☐ | SV-243173r879547_rule | The network device must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device. |
| ☐ | SV-243174r916342_rule | The network device must terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after 10 minutes of inactivity except to fulfill documented and validated mission requirements. |
| ☐ | SV-243175r879594_rule | The network device must be configured to authenticate each administrator prior to authorizing privileges based on assignment of group or role. |
| ☐ | SV-243176r879530_rule | The network device must enforce the assigned privilege level for each administrator and authorizations for access to all commands relative to the privilege level in accordance with applicable policy for the device. |
| ☐ | SV-243177r879785_rule | The network device must be configured to implement cryptographic mechanisms using a FIPS 140-2 approved algorithm to protect the confidentiality of remote maintenance sessions. |
| ☐ | SV-243178r879874_rule | The network device must generate audit records when successful/unsuccessful logon attempts occur. |
| ☐ | SV-243179r879887_rule | The network device must be running an operating system release that is currently supported by the vendor. |
| ☐ | SV-243180r916111_rule | The network device must be configured to use an authentication server to authenticate users prior to granting administrative access. |
| ☐ | SV-243181r928997_rule | The network device must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC). |
| ☐ | SV-243182r879589_rule | The network device must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable. |
| ☐ | SV-243183r879546_rule | The network device must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must block any login attempt for 15 minutes. |
| ☐ | SV-243184r879588_rule | The network device must be configured to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services. |
| ☐ | SV-243185r879768_rule | The network device must authenticate Network Time Protocol (NTP) sources using authentication that is cryptographically based. |
| ☐ | SV-243186r879597_rule | The network device must implement replay-resistant authentication mechanisms for network access to privileged accounts. |
| ☐ | SV-243187r879887_rule | The network device must be configured with both an ingress and egress ACL. |
| ☐ | SV-243188r879746_rule | The network device must be configured to synchronize internal information system clocks using redundant authoritative time sources. |
STIGQter: STIG Summary: