DISA Security Technical Implementation Guides (STIGs) SRG-5: SRG-5 NDM SRG scope: the management plane of every network device, applied with the device's function SRG

The Network Device Management SRG covers the management aspect of routers, firewalls, application layer gateways and intrusion detection and prevention systems except where a product STIG exists: management interface protection, administrator account management, management session security, administrator and machine-to-machine management protocols (SSH, HTTPS, SNMP, NTP, syslog), auditing, device code upgrades and patches, configuration protection and performance monitoring. It is applied together with the technology SRG for the device's network function (Router SRG for the control plane, Firewall, ALG and IDPS SRGs for the data plane), assumes only administrator-level accounts with a single emergency administration account exempt from inactivity and password-lifetime rules, does not address NDM clients (assessed under their own OS STIG) and assumes encryption of transit traffic is the endpoints' responsibility.