STIGQter: STIG Summary: Layer 2 Switch Security Requirements Guide Version: 1 Release: 6 Benchmark Date: 24 Jan 2020:

The layer 2 switch must not use the default VLAN for management traffic.

DISA Rule

SV-76697r1_rule

Vulnerability Number

V-62207

Group Title

SRG-NET-000512

Rule Version

SRG-NET-000512-L2S-000010

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the switch for management access to use a VLAN other than the default VLAN.

Check Contents

Review the switch configuration and verify that the default VLAN is not used to access the switch for management.

If the default VLAN is being used to access the switch, this is a finding.

Vulnerability Number

V-62207

Documentable

False

Rule Version

SRG-NET-000512-L2S-000010

Severity Override Guidance

Review the switch configuration and verify that the default VLAN is not used to access the switch for management.

If the default VLAN is being used to access the switch, this is a finding.

Check Content Reference

M

Target Key

2917

Comments