Free DISA STIG and SRG Library | Vaulted

V-5616

Network devices must have identification support disabled.

Finding ID
NET0726
Rule ID
SV-5616r3_rule
Severity
Cat III
CCE
(None)
Group Title
Identification support is enabled.
CCI
(None)
Target Key
(None)
Documentable
No
Discussion

Identification support allows one to query a TCP port for identification. This feature enables an unsecured protocol to report the identity of a client initiating a TCP connection and a host responding to the connection. Identification support can connect a TCP port on a host, issue a simple text string to request information, and receive a simple text-string reply. This is another mechanism to learn the router vendor, model number, and software version being run.

Fix Text

Configure the device to disable identification support.

Check Content

Review the device configuration to verify that identification support is not enabled via "ip identd" global command. It is disabled by default. If identifications support is enabled, this is a finding.

Responsibility

Information Assurance Officer