NET0726 - Identification support is enabled.

Information

The network element must have identification support disabled.

Identification support allows one to query a TCP port for identification. This feature enables an unsecured protocol to report the identity of a client initiating a TCP connection and a host responding to the connection. Identification support can connect a TCP port on a host, issue a simple text string to request information, and receive a simple text-string reply. This is another mechanism to learn the router vendor, model number, and software version being run. Review the device configuration to verify that identification support is not enabled via 'ip identd' global command. It is disabled by default.

Solution

IOS Procedure- Disable identification support by configuring the global 'no ip identd' command.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Network_Perimeter_Router_L3_Switch_V8R32_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, CAT|III, CSCv6|9.1, Rule-ID|SV-5616r3_rule, STIG-ID|NET0726, Vuln-ID|V-5616

Plugin: Cisco

Control ID: 551dd7fc82ff51d75c8e8b5e21157e6dd24c45f9220ef9789288a981df893547