The network device must dynamically manage identifiers.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-55257	SRG-APP-000396-NDM-000311	SV-69503r1_rule		Medium

Description
Dynamic identifier management prevents disruption of operations by minimizing the need for system restarts. Dynamic establishment of new identifiers will occur while the system is operational. New identifiers or changes to existing identifiers must take effect without the need for a system or session restart. Preestablished trust relationships and mechanisms with appropriate authorities (e.g., Active Directory or authentication server) which validate each identifier are essential to prevent unauthorized access by changed or revoked accounts.

Description

Dynamic identifier management prevents disruption of operations by minimizing the need for system restarts. Dynamic establishment of new identifiers will occur while the system is operational. New identifiers or changes to existing identifiers must take effect without the need for a system or session restart. Preestablished trust relationships and mechanisms with appropriate authorities (e.g., Active Directory or authentication server) which validate each identifier are essential to prevent unauthorized access by changed or revoked accounts.

STIG	Date
Network Device Management Security Requirements Guide	2017-07-07

Details

Check Text ( C-55877r1_chk )
Determine if the network device dynamically manages identifiers. This requirement may be verified by demonstration, configuration review, or validated test results. This requirement may be met through use of a properly configured authentication server if the device is configured to use the authentication server. If identifiers are not dynamically managed, this is a finding.

Fix Text (F-60121r1_fix)
Configure the network device or its associated authentication server to dynamically manage identifiers.