| Checked | Name | Title |
|---|
| ☐ | SV-256071r960735_rule | The Riverbed NetProfiler must be configured to limit the number of concurrent sessions to one for the locally defined administrator account. |
| ☐ | SV-256072r1015798_rule | The Riverbed NetProfiler must be configured to automatically generate DOD-required audit records with sufficient information to support incident reporting to a central log server. |
| ☐ | SV-256073r960840_rule | The Riverbed NetProfiler must enforce the limit of three consecutive invalid logon attempts, after which time it must block any login attempt for 30 minutes, at a minimum. |
| ☐ | SV-256074r960843_rule | The Riverbed NetProfiler must be configured to display the Standard Mandatory DOD Notice and Consent Banner before granting access to the device. |
| ☐ | SV-256075r960846_rule | The Riverbed NetProfiler must be configured to retain the Standard Mandatory DOD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access. |
| ☐ | SV-256077r960966_rule | The Riverbed NetProfiler must be configured to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services. |
| ☐ | SV-256078r960969_rule | The Riverbed NetProfiler must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable. |
| ☐ | SV-256079r1015799_rule | The Riverbed NetProfiler must be configured to authenticate each administrator prior to authorizing privileges based on roles. |
| ☐ | SV-256080r1015800_rule | The Riverbed NetProfiler must be configured to enforce a minimum 15-character password length. |
| ☐ | SV-256081r1015801_rule | The Riverbed NetProfiler must configure the local account password to "require mixed case". |
| ☐ | SV-256082r1015802_rule | The Riverbed NetProfiler must require that at least one special character be used. |
| ☐ | SV-256084r961068_rule | The Riverbed NetProfiler must be configured to terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after 10 minutes of inactivity except to fulfill documented and validated mission requirements. |
| ☐ | SV-256085r1015803_rule | The Riverbed NetProfiler must be configured to synchronize internal information system clocks using redundant authoritative time sources. |
| ☐ | SV-256086r961443_rule | The Riverbed NetProfiler must be configured to record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC). |
| ☐ | SV-256087r997789_rule | The Riverbed NetProfiler must be configured to record time stamps for audit records that meet a granularity of one second for a minimum degree of precision. |
| ☐ | SV-256088r961506_rule | The Riverbed NetProfiler must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC). |
| ☐ | SV-256089r961506_rule | The Riverbed NetProfiler must be configured to authenticate Network Time Protocol (NTP) sources using authentication that is cryptographically based. |
| ☐ | SV-256090r1015804_rule | The Riverbed NetProfiler must be configured to implement cryptographic mechanisms using a FIPS 140-2/140-3 validated algorithm to protect the confidentiality and integrity of all cryptographic functions. |
| ☐ | SV-256091r961620_rule | The Riverbed NetProfiler must be configured to protect against known types of denial-of-service (DOS) attacks by restricting web and SSH access to the appliance. |
| ☐ | SV-256092r961860_rule | The Riverbed NetProfiler must be configured to use redundant Syslog servers that are configured on a different system than the NetProfiler appliance. |
| ☐ | SV-256093r997791_rule | The Riverbed NetProfiler must be configured to use an authentication server to authenticate users prior to granting administrative access. |
| ☐ | SV-256094r997792_rule | The Riverbed NetProfiler must be configured to obtain its public key certificates from an appropriate certificate policy through an approved service provider. |
| ☐ | SV-256095r961863_rule | The Riverbed NetProfiler must be configured to run an operating system release that is currently supported by the vendor. |
| ☐ | SV-256096r961863_rule | The Riverbed NetProfiler must be configured to conduct backups of system-level information and system documentation, including security-related documentation, when changes occur or weekly, whichever is sooner. |
| ☐ | SV-256097r1015805_rule | The network device must terminate shared/group account credentials when members leave the group. |
STIGQter: STIG Summary: