CCI|CCI-001358

Title

Establish privileged user accounts in accordance with a role-based access scheme; or an attribute-based access scheme.

Reference Item Details

Reference: CCI - DISA Control Correlation Identifier

Category: 2024

Audit Items

View all Reference Audit Items

Name	Plugin	Audit Name
ARST-ND-000350 - The Arista network device must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.	Arista	DISA STIG Arista MLS EOS 4.2x NDM v2r1
CASA-ND-000450 - The Cisco ASA must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.	Cisco	DISA STIG Cisco ASA NDM v2r2
CISC-ND-000490 - The Cisco router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.	Cisco	DISA STIG Cisco IOS Router NDM v3r2
CISC-ND-000490 - The Cisco router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.	Cisco	DISA STIG Cisco IOS XE Router NDM v3r2
CISC-ND-000490 - The Cisco router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.	Cisco	DISA STIG Cisco IOS-XR Router NDM v3r2
CISC-ND-000490 - The Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.	Cisco	DISA STIG Cisco IOS XE Switch NDM v3r2
CISC-ND-000490 - The Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.	Cisco	DISA STIG Cisco NX-OS Switch NDM v3r2
CISC-ND-000490 - The Cisco switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.	Cisco	DISA STIG Cisco IOS Switch NDM v3r2
FGFW-ND-000030 - The FortiGate device must have only one local account to be used as the account of last resort in the event the authentication server is unavailable.	FortiGate	DISA Fortigate Firewall NDM STIG v1r4
JUEX-NM-000240 - The Juniper EX switch must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.	Juniper	DISA Juniper EX Series Network Device Management v2r2
JUNI-ND-000490 - The Juniper router must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.	Juniper	DISA STIG Juniper Router NDM v3r1
PANW-NM-000048 - The Palo Alto device must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.	Palo_Alto	DISA STIG Palo Alto NDM v3r2
SYMP-NM-000010 - Symantec ProxySG must be configured with only one local account that is used as the account of last resort.	BlueCoat	DISA Symantec ProxySG Benchmark NDM v1r2