CCI|CCI-004891

Title

Implement physically or logically separate subnetworks to isolate organization-defined critical system components and functions.

Reference Item Details

Reference: CCI - DISA Control Correlation Identifier

Category: 2024

Audit Items

View all Reference Audit Items

Name	Plugin	Audit Name
CISC-L2-000220 - The Cisco switch must not have the default VLAN assigned to any host-facing switch ports.	Cisco	DISA STIG Cisco IOS XE Switch L2S v3r1
CISC-L2-000220 - The Cisco switch must not have the default VLAN assigned to any host-facing switch ports.	Cisco	DISA STIG Cisco NX-OS Switch L2S v3r2
CISC-L2-000220 - The Cisco switch must not have the default VLAN assigned to any host-facing switch ports.	Cisco	DISA STIG Cisco IOS Switch L2S v3r1
CISC-L2-000250 - The Cisco switch must have all user-facing or untrusted ports configured as access switch ports.	Cisco	DISA STIG Cisco NX-OS Switch L2S v3r2
CISC-L2-000250 - The Cisco switch must have all user-facing or untrusted ports configured as access switch ports.	Cisco	DISA STIG Cisco IOS XE Switch L2S v3r1
CISC-L2-000250 - The Cisco switch must have all user-facing or untrusted ports configured as access switch ports.	Cisco	DISA STIG Cisco IOS Switch L2S v3r1
CISC-L2-000270 - The Cisco switch must not have any switchports assigned to the native VLAN.	Cisco	DISA STIG Cisco IOS Switch L2S v3r1
CISC-L2-000270 - The Cisco switch must not have any switchports assigned to the native VLAN.	Cisco	DISA STIG Cisco IOS XE Switch L2S v3r1
CISC-L2-000270 - The Cisco switch must not have any switchports assigned to the native VLAN.	Cisco	DISA STIG Cisco NX-OS Switch L2S v3r2
JUSX-VN-000006 - The Juniper SRX Services Gateway VPN must use AES encryption for the Internet Key Exchange (IKE) proposal to protect the confidentiality of remote access sessions.	Juniper	DISA Juniper SRX Services Gateway VPN v3r1