STIGhubSTIGhub
STIGsSearchCompareAbout

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • Compare Versions

Resources

  • About
  • VPAT
  • DISA STIG Library
STIGs updated 2 hours ago
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← Back to STIGs

HP FlexFabric Switch RTR Security Technical Implementation Guide

Version

V1R2

Release Date

Jun 3, 2020

SCAP Benchmark ID

HP_FlexFabric_Switch_RTR_STIG

Total Checks

21

Tags

network
CAT I: 1CAT II: 20CAT III: 0

This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DoD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via e-mail to the following address: disa.stig_spt@mail.mil.

Export CKLExport CSVExport JSON

Checks (21)

V-65965MEDIUMThe HP FlexFabric Switch must be configured so inactive HP FlexFabric Switch interfaces are disabled.V-66099MEDIUMThe HP FlexFabric Switch must not redistribute static routes to alternate gateway service provider into an Exterior Gateway Protocol or Interior Gateway Protocol to the NIPRNet or to other Autonomous System.V-66101HIGHThe HP FlexFabric Switch must protect an enclave connected to an Alternate Gateway by using an inbound filter that only permits packets with destination addresses within the sites address space.V-66103MEDIUMIf Border Gateway Protocol (BGP) is enabled on the HP FlexFabric Switch, the HP FlexFabric Switch must not be a BGP peer with a HP FlexFabric Switch from an Autonomous System belonging to any Alternate Gateway (AG).V-66107MEDIUMThe HP FlexFabric Switch must be configured to disable non-essential capabilities.V-66109MEDIUMThe HP FlexFabric Switch must enable neighbor authentication for all control plane protocols.V-66111MEDIUMThe HP FlexFabric Switch must encrypt all methods of configured authentication for routing protocols.V-66113MEDIUMThe HP FlexFabric Switch must use NIST-validated FIPS 140-2 cryptography to implement authentication encryption mechanisms for routing protocols.V-66115MEDIUMThe HP FlexFabric Switch must enforce that Interior Gateway Protocol (IGP) instances configured on the out-of-band management gateway only peer with their own routing domain.V-66117MEDIUMThe HP FlexFabric Switch must enforce that the managed network domain and the management network domain are separate routing domains and the Interior Gateway Protocol (IGP) instances are not redistributed or advertised to each other.V-66119MEDIUMThe HP FlexFabric Switch must enforce that any interface used for out-of-band management traffic is configured to be passive for the Interior Gateway Protocol (IGP) that is utilized on that management interface.V-66121MEDIUMThe HP FlexFabric Switch must be configured to restrict it from accepting outbound IP packets that contain an illegitimate address in the source address field via egress filter or by enabling Unicast Reverse Path Forwarding.V-66123MEDIUMThe HP FlexFabric Switch must manage excess bandwidth to limit the effects of packet flooding types of denial of service (DoS) attacks.V-66125MEDIUMThe HP FlexFabric Switch must configure the maximum hop limit value to at least 32.V-66127MEDIUMThe HP FlexFabric Switch must protect against or limit the effects of denial of service (DoS) attacks by employing control plane protection.V-66129MEDIUMThe HP FlexFabric Switch must only allow incoming communications from authorized sources to be routed to authorized destinations.V-66131MEDIUMThe HP FlexFabric Switch must enforce approved authorizations for controlling the flow of information between interconnected networks in accordance with applicable policy.V-66133MEDIUMThe HP FlexFabric Switch must ensure all Exterior Border Gateway Protocol (eBGP) HP FlexFabric Switches are configured to use Generalized TTL Security Mechanism (GTSM).V-66135MEDIUMThe HP FlexFabric Switch must disable Protocol Independent Multicast (PIM) on all interfaces that are not required to support multicast routing.V-66137MEDIUMThe HP FlexFabric Switch must bind a Protocol Independent Multicast (PIM) neighbor filter to interfaces that have PIM enabled.V-66139MEDIUMThe HP FlexFabric Switch must establish boundaries for IPv6 Admin-Local, IPv6 Site-Local, IPv6 Organization-Local scope, and IPv4 Local-Scope multicast traffic.