STIGhubSTIGhub
STIGhub— A free STIG search and compliance tool·STIGs updated 1 hour ago
Powered by Pylon·Privacy·Terms·Feedback·© 2026 Beacon Cloud Solutions, Inc.
← Back to STIGs

HP FlexFabric Switch L2S Security Technical Implementation Guide

Version

V1R4

Release Date

Sep 10, 2026

SCAP Benchmark ID

HP_FlexFabric_Switch_L2S_STIG

Total Checks

22

Tags

network
CAT I: 1CAT II: 21CAT III: 0

This Security Technical Implementation Guide is published as a tool to improve the security of Department of War (DoW) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.

Export CKLExport CSVExport JSONDownload STIG ZIP

Checks (22)

V-214639MEDIUMThe HP FlexFabric Switch must be configured to disable non-essential capabilities.V-214640HIGHHP FlexFabric Switch must authenticate all network-connected endpoint devices before establishing any connection.V-214641MEDIUMThe HP FlexFabric Switch must manage excess bandwidth to limit the effects of packet flooding types of denial of service (DoS) attacks.V-214642MEDIUMThe HP FlexFabric Switch must provide the capability for authorized users to select a user session to capture.V-214643MEDIUMThe HP FlexFabric Switch must provide the capability for authorized users to remotely view, in real time, all content related to an established user session from a component separate from the HP FlexFabric Switch.V-214644MEDIUMThe HP FlexFabric Switch must have Root Guard enabled on all ports where the root bridge should not appear.V-214645MEDIUMThe HP FlexFabric Switch must have BPDU Guard enabled on all user-facing access ports.V-214646MEDIUMThe HP FlexFabric Switch must have STP Loop Protection enabled all non-designated STP switch ports.V-214647MEDIUMThe HP FlexFabric Switch must have unknown storm-constrain enabled.V-214648MEDIUMThe HP FlexFabric Switch must have DHCP snooping for all user VLANs to validate DHCP messages from untrusted sources as well as rate-limit DHCP traffic.V-214649MEDIUMThe HP FlexFabric Switch must have IP Source Guard enabled on all user-facing or untrusted access switch ports.V-214650MEDIUMThe HP FlexFabric Switch must have Dynamic ARP Inspection (DAI) enabled on all user VLANs.V-214651MEDIUMThe HP FlexFabric Switch must implement Rapid STP where VLANs span multiple switches with redundant links.V-214652MEDIUMThe HP FlexFabric Switch must enable Device Link Detection Protocol (DLDP) to protect against one-way connections.V-214653MEDIUMThe HP FlexFabric Switch must have all trunk links enabled statically.V-214654MEDIUMThe HP FlexFabric Switch must have all disabled switch ports assigned an unused VLAN.V-214655MEDIUMThe HP FlexFabric Switch must not have the default VLAN assigned to any host-facing switch ports.V-214656MEDIUMThe HP FlexFabric Switch must have the default VLAN pruned from all trunk ports that do not require it.V-214657MEDIUMThe HP FlexFabric Switch must not use the default VLAN for management traffic.V-214658MEDIUMThe HP FlexFabric Switch must have all user-facing or untrusted ports configured as access switch ports.V-214659MEDIUMThe HP FlexFabric Switch must have the native VLAN assigned to a VLAN ID other than the default VLAN ID for all 802.1q trunk links.V-214660MEDIUMThe HP FlexFabric Switch must not have any access switch ports assigned to the native VLAN.