STIGQter: STIG Summary: HP FlexFabric Switch NDM Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Jul 2020:

The HP FlexFabric Switch must support organizational requirements to conduct backups of system level information contained in the information system when changes occur or weekly, whichever is sooner.

DISA Rule

SV-80779r1_rule

Vulnerability Number

V-66289

Group Title

SRG-APP-000516-NDM-000340

Rule Version

HFFS-ND-000137

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.
• CCI-000537 - The organization conducts backups of system-level information contained in the information system per organization-defined frequency that is consistent with recovery time and recovery point objectives.

Weight

10

Fix Recommendation

Configure the HP FlexFabric Switch to back up its configuration to a TFTP/FTP server:

[HP] scheduler job config_backup
[HP-job-config_backup] command 1 tftp 15.252.76.13 put 5900.cfg [HP-job-config_backup] quit [HP] scheduler schedule 5900-backup [HP-schedule-5900-backup] user-role network-admin [HP-schedule-5900-backup] job test [HP-schedule-5900-backup] time repeating at 14:14 week-day Thu

Check Contents

Review the HP FlexFabric Switch configuration to determine if it is configured to back up its configuration file on a weekly basis.

If a schedule does not exist, this is a finding.

[HP] display scheduler job

Job name: system_backup
tftp 192.168.1.13 put hp5900.cfg

Vulnerability Number

V-66289

Documentable

False

Rule Version

HFFS-ND-000137

Severity Override Guidance

Review the HP FlexFabric Switch configuration to determine if it is configured to back up its configuration file on a weekly basis.

If a schedule does not exist, this is a finding.

[HP] display scheduler job

Job name: system_backup
tftp 192.168.1.13 put hp5900.cfg

Check Content Reference

M

Target Key

2971

Comments