AMLS-L2-000100 - The Arista Multilayer Switch must enforce approved authorizations for controlling the flow of information within the network based on organization-defined information flow control policies.

800-53|AC-4

CAT|II

CCI|CCI-001368

Rule-ID|SV-214662r382732_rule

STIG-ID|AMLS-L2-000100

STIG-Legacy|SV-75269

STIG-Legacy|V-60813

Vuln-ID|V-214662

AMLS-L2-000110 - The Arista Multilayer Switch must enforce approved authorizations for controlling the flow of information between interconnected systems based on organization-defined information flow control policies.

CCI|CCI-001414

Rule-ID|SV-214663r382735_rule

STIG-ID|AMLS-L2-000110

STIG-Legacy|SV-75277

STIG-Legacy|V-60821

Vuln-ID|V-214663

AMLS-L2-000120 - The Arista Multilayer Switch must uniquely identify all network-connected endpoint devices before establishing any connection - aaa auth dot1x default group

800-53|IA-3

CCI|CCI-000778

Rule-ID|SV-214664r385501_rule

STIG-ID|AMLS-L2-000120

STIG-Legacy|SV-75279

STIG-Legacy|V-60823

Vuln-ID|V-214664

AMLS-L2-000120 - The Arista Multilayer Switch must uniquely identify all network-connected endpoint devices before establishing any connection - dot1x system-auth-control

AMLS-L2-000130 - The Arista Multilayer Switch must authenticate all endpoint devices before establishing a network connection using bidirectional authentication that is cryptographically based - aaa authentication dot1x default group

800-53|IA-3(1)

CCI|CCI-001967

Rule-ID|SV-214665r971529_rule

STIG-ID|AMLS-L2-000130

STIG-Legacy|SV-75281

STIG-Legacy|V-60825

Vuln-ID|V-214665

AMLS-L2-000130 - The Arista Multilayer Switch must authenticate all endpoint devices before establishing a network connection using bidirectional authentication that is cryptographically based - dot1x system-auth-control

AMLS-L2-000140 -  The Arista Multilayer Switch must re-authenticate all endpoint devices every 60 minutes or less - dot1x reauthentication

Rule-ID|SV-230143r971529_rule

STIG-ID|AMLS-L2-000140

STIG-Legacy|SV-75283

STIG-Legacy|V-60827

Vuln-ID|V-230143

AMLS-L2-000140 -  The Arista Multilayer Switch must re-authenticate all endpoint devices every 60 minutes or less - dot1x timeout reauth-period 3600

AMLS-L2-000150 - The Arista Multilayer Switch must re-authenticate 802.1X connected devices every hour - dot1x timeout reauth-period 3600

800-53|IA-11

CCI|CCI-002039

Rule-ID|SV-230144r953984_rule

STIG-ID|AMLS-L2-000150

STIG-Legacy|SV-75285

STIG-Legacy|V-60829

Vuln-ID|V-230144

AMLS-L2-000150 - The Arista Multilayer Switch must re-authenticate 802.1X connected devices every hour - logging level DOT1X informational

AMLS-L2-000160 - The Arista Multilayer Switch must authenticate 802.1X connected devices before establishing any connection - aaa auth dot1x default group radius

CCI|CCI-001958

Rule-ID|SV-214666r856148_rule

STIG-ID|AMLS-L2-000160

STIG-Legacy|SV-75287

STIG-Legacy|V-60831

Vuln-ID|V-214666

AMLS-L2-000160 - The Arista Multilayer Switch must authenticate 802.1X connected devices before establishing any connection - dot1x system-auth-control

AMLS-L2-000170 - The Arista MLS L2S must be using a version supported by the vendor.

Detections

Analytics

DISA STIG Arista MLS DCS-7000 Series L2S v1r3

Audit Details

File Details

Audit Changelog

No revisions found