CISC-ND-000530 - The Cisco switch must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

Information

A replay attack may enable an unauthorized user to gain access to the application. Authentication sessions between the authenticator and the application validating the user credentials must not be vulnerable to a replay attack.

An authentication process resists replay attacks if it is impractical to achieve a successful authentication by recording and replaying a previous authentication message.

Solution

Enable fips mode via the command 'fips mode enable'.

Note: The switch will require a reboot for fips mode to be enabled.

Item Details

Audit Name: DISA STIG Cisco NX-OS Switch NDM v2r6

Plugin: Cisco

Control ID: d18aa1a7bde3c6b4a642c7f1eba9df0b7e17786e8b2baedbd8f3b6ef32206e9a

Detections

Analytics

CISC-ND-000530 - The Cisco switch must be configured to implement replay-resistant authentication mechanisms for network access to privileged accounts.

Warning! Audit Deprecated

Information

Solution

See Also

Item Details