| Checked | Name | Title |
|---|
| ☐ | SV-275452r1147406_rule | The Riverbed NetIM must enable and configure user audit logging. |
| ☐ | SV-275453r1147409_rule | The Riverbed NetIM must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable. |
| ☐ | SV-275454r1147412_rule | The Riverbed NetIM must be configured to assign appropriate user roles or access levels to authenticated users. |
| ☐ | SV-275455r1148274_rule | NetIM must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the device. |
| ☐ | SV-275456r1147418_rule | NetIM must retain the Standard Mandatory DOD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access. |
| ☐ | SV-275457r1147421_rule | The Riverbed NetIM must generate an alert of all audit failure events. |
| ☐ | SV-275461r1148276_rule | The Riverbed NetIM must be configured to use an authentication server configured for multifactor authentication (MFA) using DOD PKI for the purpose of authenticating users prior to granting administrative access. |
| ☐ | SV-275462r1147436_rule | The Riverbed NetIM must support organizational requirements to back up the NetIM application and security configuration when changes occur. |
| ☐ | SV-275465r1147445_rule | The Riverbed NetIM must enforce a minimum 15-character password length. |
| ☐ | SV-275466r1147448_rule | The Riverbed NetIM must be configured to require immediate selection of a new password upon account recovery for password-based authentication. |
| ☐ | SV-275467r1148279_rule | The Riverbed NetIM must be configured to allow user selection of long passwords and passphrases, including spaces and all printable characters for password-based authentication. |
| ☐ | SV-275473r1147469_rule | The Riverbed NetIM must be configured to automatically generate DOD-required audit records with sufficient information to support incident reporting. |
| ☐ | SV-275481r1148299_rule | The Riverbed NetIM must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must block any login attempt for 15 minutes. |
| ☐ | SV-275482r1147496_rule | The Riverbed NetIM must off-load audit records onto a different system or media than the system being audited. |
| ☐ | SV-275488r1147514_rule | The Riverbed NetIM must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC). |
STIGQter: STIG Summary: