TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit

Audit Details

Name: TNS Alcatel-Lucent TiMOS/Nokia SR-OS Best Practice Audit

Updated: 6/17/2024

Authority: TNS

Plugin: Alcatel

Revision: 1.13

Estimated Item Count: 69

File Details

Filename: TNS_Alcatel_Nokia_TiMOS_Best_Practices.audit

Size: 130 kB

MD5: 57fd665497f2f1e9c680293765e88c05
SHA256: 16add45ebd48a786d015ff9a3f7f5f0ce0f7cf9504faa227820bda155a1af930

Audit Changelog

 
Revision 1.13

Jun 17, 2024

Miscellaneous
  • Metadata updated.
Revision 1.12

Dec 22, 2023

Miscellaneous
  • Metadata updated.
Revision 1.11

Mar 7, 2023

Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.10

Dec 7, 2022

Miscellaneous
  • Variables updated.
Revision 1.9

Jul 12, 2022

Functional Update
  • Authentication: a backup remote authentication server is available
  • Authentication: enable remote authentication
  • Authentication: use a remote authentication server
  • BGP: Authenticate peers
  • BGP: Disable Capability Negotiation
  • ICMP: Do not return Proxy ARP requests
  • ICMP: Do not return redirect messages
  • ICMP: Do not return unreachable messages
  • Login: Accounts are locked after 3 failed password attempts
  • Login: Exponential Backoff is set
  • Login: Idle connections time out after 5 minutes or less
  • Login: ssh - limit consecutive logins to 16 or less
  • SNMP: Use SNMPv3 only
  • SNMP: configure access groups to use privacy
  • SNMP: configure community strings
  • Spanning Tree: enable edge-port
  • Spanning Tree: enable root-guard
Revision 1.8

Jun 22, 2022

Functional Update
  • BGP: Authenticate peers
Revision 1.7

May 18, 2022

Miscellaneous
  • Platform check updated.
  • References updated.
Added
  • TNS_Alcatel_Nokia_TiMOS_Best_Practices.audit from TNS Alcatel/Nokia TiMOS Best Practices
Removed
  • TiMOS/SR-OS Installed
Revision 1.6

Apr 25, 2022

Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.5

Sep 29, 2020

Miscellaneous
  • References updated.
Revision 1.4

Apr 14, 2020

Functional Update
  • BGP: Disable Capability Negotiation
Miscellaneous
  • Metadata updated.