AMLS-NM-000100 - The Arista Multilayer Switch must have a local infrequently used account to be used as an account of last resort with full access to the network device.

800-53|CM-6b.

CAT|I

CCI|CCI-000366

Rule-ID|SV-217354r961863_rule

STIG-ID|AMLS-NM-000100

STIG-Legacy|SV-75271

STIG-Legacy|V-60815

Vuln-ID|V-217354

AMLS-NM-000110 - The Arista Multilayer Switch account of last resort must have a password with a length of 15 characters.

800-53|IA-5(1)(a)

CAT|II

CCI|CCI-000205

Rule-ID|SV-217355r984092_rule

STIG-ID|AMLS-NM-000110

STIG-Legacy|SV-75289

STIG-Legacy|V-60833

Vuln-ID|V-217355

AMLS-NM-000120 - The Arista Multilayer Switch must automatically audit account creation.

800-53|AC-2(4)

CCI|CCI-000018

Rule-ID|SV-217356r960777_rule

STIG-ID|AMLS-NM-000120

STIG-Legacy|SV-75291

STIG-Legacy|V-60835

Vuln-ID|V-217356

AMLS-NM-000130 - The Arista Multilayer Switch must automatically audit account modification.

CCI|CCI-001403

Rule-ID|SV-217357r960780_rule

STIG-ID|AMLS-NM-000130

STIG-Legacy|SV-75293

STIG-Legacy|V-60837

Vuln-ID|V-217357

AMLS-NM-000140 - The Arista Multilayer Switch must automatically audit account disabling actions.

CCI|CCI-001404

Rule-ID|SV-217358r960783_rule

STIG-ID|AMLS-NM-000140

STIG-Legacy|SV-75295

STIG-Legacy|V-60839

Vuln-ID|V-217358

AMLS-NM-000150 - The Arista Multilayer Switch must automatically audit account removal actions.

CCI|CCI-001405

Rule-ID|SV-217359r960786_rule

STIG-ID|AMLS-NM-000150

STIG-Legacy|SV-75297

STIG-Legacy|V-60841

Vuln-ID|V-217359

AMLS-NM-000160 - The Arista Multilayer Switch must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the device.

800-53|AC-8a.

CCI|CCI-000048

Rule-ID|SV-217360r960843_rule

STIG-ID|AMLS-NM-000160

STIG-Legacy|SV-75299

STIG-Legacy|V-60843

Vuln-ID|V-217360

AMLS-NM-000170 - The Arista Multilayer Switch must protect against an individual (or process acting on behalf of an individual) falsely denying having performed organization-defined actions to be covered by non-repudiation.

800-53|AU-10

CAT|III

CCI|CCI-000166

Rule-ID|SV-217361r960864_rule

STIG-ID|AMLS-NM-000170

STIG-Legacy|SV-75301

STIG-Legacy|V-60845

Vuln-ID|V-217361

AMLS-NM-000180 - The Arista Multilayer Switch must generate audit records when successful/unsuccessful attempts to access privileges occur.

800-53|AU-12c.

CCI|CCI-000172

Rule-ID|SV-217362r960885_rule

STIG-ID|AMLS-NM-000180

STIG-Legacy|SV-75303

STIG-Legacy|V-60847

Vuln-ID|V-217362

AMLS-NM-000190 - The Arista Multilayer Switch must produce audit log records containing sufficient information to establish what type of event occurred.

800-53|AU-3

CCI|CCI-000130

Rule-ID|SV-217363r960891_rule

STIG-ID|AMLS-NM-000190

STIG-Legacy|SV-75305

STIG-Legacy|V-60849

Vuln-ID|V-217363

AMLS-NM-000200 - The Arista Multilayer Switch must generate audit records containing the full-text recording of privileged commands.

800-53|AU-3(1)

CCI|CCI-000135

Rule-ID|SV-217364r960909_rule

STIG-ID|AMLS-NM-000200

STIG-Legacy|SV-75307

STIG-Legacy|V-60851

Vuln-ID|V-217364

AMLS-NM-000210 - The Arista Multilayer Switch must be configured to prohibit the use of all unnecessary and/or nonsecure functions, ports, protocols, and/or services, as defined in the PPSM CAL and vulnerability assessments.

800-53|CM-7b.

CCI|CCI-000382

Rule-ID|SV-217365r960966_rule

STIG-ID|AMLS-NM-000210

STIG-Legacy|SV-75309

STIG-Legacy|V-60853

Vuln-ID|V-217365

AMLS-NM-000220 - The Arista Multilayer Switch must use multifactor authentication for local access to privileged accounts.

800-53|IA-2(3)

CCI|CCI-000767

Rule-ID|SV-265635r997392_rule

STIG-ID|AMLS-NM-000220

Vuln-ID|V-265635

AMLS-NM-000240 - The Arista Multilayer Switch must terminate all network connections associated with a device management session at the end of the session, or the session must be terminated after 10 minutes of inactivity except to fulfill documented and validated mission requirements.

800-53|SC-10

CCI|CCI-001133

Rule-ID|SV-217366r961068_rule

STIG-ID|AMLS-NM-000240

STIG-Legacy|SV-75315

STIG-Legacy|V-60857

Vuln-ID|V-217366

AMLS-NM-000280 - The Arista Multilayer Switch must be configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources - NTP Server 1

800-53|AU-8(2)

CCI|CCI-001893

Rule-ID|SV-217367r987682_rule

STIG-ID|AMLS-NM-000280

STIG-Legacy|SV-75323

STIG-Legacy|V-60865

Vuln-ID|V-217367

AMLS-NM-000280 - The Arista Multilayer Switch must be configured to synchronize internal information system clocks with the primary and secondary time sources located in different geographic regions using redundant authoritative time sources - NTP Server 2

AMLS-NM-000290 - The Arista Multilayer Switch must record time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

800-53|AU-8b.

CCI|CCI-001890

Rule-ID|SV-217368r961443_rule

STIG-ID|AMLS-NM-000290

STIG-Legacy|SV-75325

STIG-Legacy|V-60867

Vuln-ID|V-217368

AMLS-NM-000340 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the integrity of nonlocal maintenance and diagnostic communications - api http

800-53|MA-4(6)

CCI|CCI-002890

Rule-ID|SV-217369r961554_rule

STIG-ID|AMLS-NM-000340

STIG-Legacy|SV-75327

STIG-Legacy|V-60869

Vuln-ID|V-217369

AMLS-NM-000340 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the integrity of nonlocal maintenance and diagnostic communications - api https

AMLS-NM-000340 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the integrity of nonlocal maintenance and diagnostic communications - telnet

AMLS-NM-000350 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the confidentiality of nonlocal maintenance and diagnostic communications - api http

CCI|CCI-003123

Rule-ID|SV-217370r961557_rule

STIG-ID|AMLS-NM-000350

STIG-Legacy|SV-75329

STIG-Legacy|V-60871

Vuln-ID|V-217370

AMLS-NM-000350 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the confidentiality of nonlocal maintenance and diagnostic communications - api https

AMLS-NM-000350 - Arista Multilayer Switches used for nonlocal maintenance sessions must implement cryptographic mechanisms to protect the confidentiality of nonlocal maintenance and diagnostic communications - telnet

AMLS-NM-000360 - The Arista Multilayer Switch must generate audit records for privileged activities or other system-level access - aaa commands

Rule-ID|SV-217371r961827_rule

STIG-ID|AMLS-NM-000360

STIG-Legacy|SV-75331

STIG-Legacy|V-60873

Vuln-ID|V-217371

AMLS-NM-000360 - The Arista Multilayer Switch must generate audit records for privileged activities or other system-level access - aaa exec

AMLS-NM-000360 - The Arista Multilayer Switch must generate audit records for privileged activities or other system-level access - aaa system

AMLS-NM-000370 - The Arista Multilayer Switch must generate audit records showing starting and ending time for administrator access to the system - all logging

Rule-ID|SV-217372r961830_rule

STIG-ID|AMLS-NM-000370

STIG-Legacy|SV-75333

STIG-Legacy|V-60875

Vuln-ID|V-217372

AMLS-NM-000370 - The Arista Multilayer Switch must generate audit records showing starting and ending time for administrator access to the system - trap logging

AMLS-NM-000380 - The Arista Multilayer Switch must generate audit records when concurrent logons from different workstations occur - show logging

Rule-ID|SV-217373r961833_rule

STIG-ID|AMLS-NM-000380

STIG-Legacy|SV-75335

STIG-Legacy|V-60877

Vuln-ID|V-217373

AMLS-NM-000380 - The Arista Multilayer Switch must generate audit records when concurrent logons from different workstations occur - trap logging

AMLS-NM-000400 - The Arista Multilayer Switch must, at a minimum, off-load audit records for interconnected systems in real time - logging host

800-53|AU-4(1)

CCI|CCI-001851

Rule-ID|SV-217374r961860_rule

STIG-ID|AMLS-NM-000400

STIG-Legacy|SV-75339

STIG-Legacy|V-60881

Vuln-ID|V-217374

AMLS-NM-000400 - The Arista Multilayer Switch must, at a minimum, off-load audit records for interconnected systems in real time - trap logging

AMLS-NM-000420 - The Arista Multilayer Switch must protect the audit records of nonlocal accesses to privileged accounts and the execution of privileged functions - logging host

Rule-ID|SV-217375r961863_rule

STIG-ID|AMLS-NM-000420

STIG-Legacy|SV-75341

STIG-Legacy|V-60883

Vuln-ID|V-217375

AMLS-NM-000420 - The Arista Multilayer Switch must protect the audit records of nonlocal accesses to privileged accounts and the execution of privileged functions - show user-account

AMLS-NM-000420 - The Arista Multilayer Switch must protect the audit records of nonlocal accesses to privileged accounts and the execution of privileged functions - trap logging

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa commands all default

800-53|CM-6(1)

CCI|CCI-000370

Rule-ID|SV-217376r961863_rule

STIG-ID|AMLS-NM-000430

STIG-Legacy|SV-75343

STIG-Legacy|V-60885

Vuln-ID|V-217376

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa commands all start-stop

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa console

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa dot1x default group

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa exec default

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa exec default start-stop

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa group server

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa login console group

AMLS-NM-000430 - The Arista Multilayer Switch must employ AAA service to centrally manage authentication settings - aaa login default group

Detections

Analytics

DISA STIG Arista MLS DCS-7000 Series NDM v1r4

Audit Details

File Details

Audit Changelog

No revisions found