DISA STIGS Viewer

The Dell OS10 Router must not be configured to have any zero-touch deployment feature enabled when connected to an operational network.

Overview

Finding ID Version Rule ID IA Controls Severity
V-269885 OS10-RTR-000600 SV-269885r1052040_rule   Medium
Description
Network devices that are configured via a zero-touch deployment or auto-loading feature can have their startup configuration or image pushed to the device for installation via TFTP or Remote Copy (rcp). Loading an image or configuration file from the network is taking a security risk because the file could be intercepted by an attacker who could corrupt the file, resulting in a denial of service.
STIG Date
Dell OS10 Switch Router Security Technical Implementation Guide 2024-12-11

Details

Check Text (C-73918r1052038_chk)
Review the Dell OS10 Switch configuration to verify that zero-touch deployment has been disabled.

Verify that ZTD has been disabled by checking with the following command:

OS10# show ztd-status
-----------------------------------
ZTD Status : disabled
ZTD State : init
Protocol State : idle
Reason :
-----------------------------------
OS10#

if ZTD is enabled, this is a finding.
Fix Text (F-73819r1052039_fix)
Disable zero-touch deployment.

Log in to the device and make any configuration change and then issue the following commands:

OS10# write memory
OS10# ztd stop
OS10# reload