← Back to Network Infrastructure Policy Security Technical Implementation Guide

V-251375

CAT III (Low)

Current and previous network element configurations must be stored in a secured location.

Rule ID

SV-251375r853654_rule

STIG

Network Infrastructure Policy Security Technical Implementation Guide

Version

V10R7

CCIs

CCI-001785

Discussion

If the network element's non-volatile memory is lost without a recent configuration stored in an offline location, it may take time to recover that segment of the network. Users connected directly to the switch or router will be without service for a longer than acceptable time.

Check Content

At a minimum, a copy of the current and previous network element configurations must be saved.  Storage can take place on a classified network, OOB network, or offline.

If the current and previous network element configurations are not stored in a secured location, this is a finding.

Fix Text

The network administrator will store the current and previous router and switch configurations in a secure location. Storage can take place on a classified network, OOB network, or offline.  Configurations can only be accessed by server or network admin.