STIGhubSTIGhub
STIGsRMF ControlsCompare

STIGhub

A free tool to search and browse the entire DISA STIG library. Saves up to 75% in security compliance research time.

Navigation

  • Browse STIGs
  • Search
  • RMF Controls
  • Compare Versions

Resources

  • About
  • Release Notes
  • VPAT
  • DISA STIG Library
STIGs updated 4 hours ago
Powered by Pylon
© 2026 Beacon Cloud Solutions, Inc. All rights reserved.
← Back to STIGs

Riverbed NetIM NDM Security Technical Implementation Guide

Version

V1R1

Release Date

Sep 29, 2025

SCAP Benchmark ID

RB_NetIM_STIG

Total Checks

15

Tags

other
CAT I: 4CAT II: 9CAT III: 2

This Security Technical Implementation Guide is published as a tool to improve the security of Department of Defense (DOD) information systems. The requirements are derived from the National Institute of Standards and Technology (NIST) 800-53 and related documents. Comments or proposed revisions to this document should be sent via email to the following address: disa.stig_spt@mail.mil.

Export CKLExport CSVExport JSONDownload STIG ZIP

Checks (15)

V-275452HIGHThe Riverbed NetIM must enable and configure user audit logging.V-275453MEDIUMThe Riverbed NetIM must be configured with only one local account to be used as the account of last resort in the event the authentication server is unavailable.V-275454HIGHThe Riverbed NetIM must be configured to assign appropriate user roles or access levels to authenticated users.V-275455MEDIUMNetIM must display the Standard Mandatory DOD Notice and Consent Banner before granting access to the device.V-275456MEDIUMNetIM must retain the Standard Mandatory DOD Notice and Consent Banner on the screen until the administrator acknowledges the usage conditions and takes explicit actions to log on for further access.V-275457LOWThe Riverbed NetIM must generate an alert of all audit failure events.V-275461HIGHThe Riverbed NetIM must be configured to use an authentication server configured for multifactor authentication (MFA) using DOD PKI for the purpose of authenticating users prior to granting administrative access.V-275462MEDIUMThe Riverbed NetIM must support organizational requirements to back up the NetIM application and security configuration when changes occur.V-275465MEDIUMThe Riverbed NetIM must enforce a minimum 15-character password length.V-275466LOWThe Riverbed NetIM must be configured to require immediate selection of a new password upon account recovery for password-based authentication.V-275467MEDIUMThe Riverbed NetIM must be configured to allow user selection of long passwords and passphrases, including spaces and all printable characters for password-based authentication.V-275473HIGHThe Riverbed NetIM must be configured to automatically generate DOD-required audit records with sufficient information to support incident reporting.V-275481MEDIUMThe Riverbed NetIM must be configured to enforce the limit of three consecutive invalid logon attempts, after which time it must block any login attempt for 15 minutes.V-275482MEDIUMThe Riverbed NetIM must off-load audit records onto a different system or media than the system being audited.V-275488MEDIUMThe Riverbed NetIM must be configured to authenticate SNMP messages using a FIPS-validated Keyed-Hash Message Authentication Code (HMAC).