NET0760 - Configuration auto-loading must be disabled - 'book network'

Information

Devices can find their startup configuration either in their own NVRAM or access it over the network via TFTP or Remote Copy (rcp). Loading the image from the network is taking a security risk since the image could be intercepted by an attacker who could corrupt the image resulting in a denial of service. Configuration auto-loading can be enabled when the device is connected to a non-operational network. Once the device is connected to an operational (i.e. production) network, configuration auto-loading must be disabled.

Solution

Disable the configuration auto-loading feature, when connected to an operational network.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Network_Perimeter_Router_L3_Switch_V8R32_STIG.zip

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-7(9), CAT|II, Rule-ID|SV-3080r4_rule, STIG-ID|NET0760, Vuln-ID|V-3080

Plugin: Cisco

Control ID: ca9ef9c2a7815d204a2024ae63b9c4adfb60780179c08c5e3ea676ee27a38e78