+NET.3.1.A1 Secure Basic Configuration of a Router or Switch (B)

NET.3.1.A1 Secure Basic Configuration of a Router or Switch (B)

Prior to using a router or switch, it MUST be configured securely. All configuration changes SHOULD be documented in a transparent manner. The integrity of the configuration files MUST be protected appropriately. Before access passwords are stored, they MUST be secured using an up-to-date cryptographic method (see CON.1 Crypto Concept).

Routers and switches MUST be configured in such a way that only absolutely necessary services, protocols, and functional extensions are used. Services, protocols, and functional extensions that are not required MUST be disabled or uninstalled completely. Unused interfaces on routers and switches MUST also be disabled. If possible, unused network ports MUST be disabled or at least assigned to an unassigned VLAN set up for this purpose.

If functional extensions are used, the security policies of the organisation in question MUST continue to be met. The use of such extensions SHOULD also be justified and documented.

Information on internal configurations and operating statuses MUST be hidden from third parties. Unnecessary information services MUST be disabled.

1. Přehled

1.1 Odkazy

1.2 Identifikované požadavky

1.3 Související regulace

2. Identifikované požadavky

Požadavky

3. Související regulace

Regulace

Propojené úkoly

Vazby
blocks G 0.9 Failure or Disruption of Communication Networks
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.26 Malfunction of Devices or Systems