Best Practice Detail

13-8-8000

Network Operators and Service Providers should establish a process, during design/implementation of any network/service element or management system, to identify potentially vulnerable, network-accessible services (such as Network Time Protocol (NTP), Remote Procedure Calls (RPC), Finger, Rsh-type commands, etc.) and either disable, if unneeded, or provided additional compensating controls, such as proxy servers, firewalls, or router filter lists, if such services are required for a business purpose.

Status: Rollover New

References/Comments: Configuration guides for security from NIST (800-53 Rev. 3), NSA (Security Configuration Guides), and Center For Internet Security (CIS Benchmarks).

Historical events:

• Network Operators
• Service Providers
• Internet/Data
• Cyber Security
• Network Elements
• Network Operations
• CSRIC VII: Rollover New In CSRIC VII