Attachment 3 - FARS Cyber Requirements.pdf
PDF 77 KB Posted
- Solicitation number
- LT2517FARS_Upgrade_FireWorks_Install
About this file
This document outlines a Security Management Feature specification for network switch cyber requirements under the Federal Acquisition Regulation Supplement (FARS). The requirements specify comprehensive security configurations for network switches, including mandatory authentication, password protection, and network connection management protocols. Key technical specifications include uniquely identifying and authenticating all network-connected endpoint devices, storing only cryptographic password representations, terminating network connections after five minutes of inactivity, using FIPS-validated Keyed-Hash Message Authentication Code (HMAC), implementing cryptographic mechanisms to protect remote maintenance sessions, running current IOS releases, restricting internal traffic, and blocking traffic to IP core infrastructure.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Attachment 1 - SOW FARS and FireWorks Final 30 July 2025.docx | DOCX document | |
| Attachment 2 - Product List FARS 14 May.xlsx | XLSX spreadsheet |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Security Management Feature - FARS Cyber Requirements
• The switch must uniquely identify and authenticate all network-connected endpoint devices before establishing any connection.
• The switch must be configured to prohibit the use of all unnecessary and non-secure functions and services.
• The switch must only store cryptographic representations of passwords.
• The switch must be configured to terminate all network connections associated with device management after five minutes of inactivity.
• The switch must be configured to use FIPS-validated Keyed-Hash Message Authentication Code
(HMAC) to protect the integrity of remote maintenance sessions.
• The switch must be configured to implement cryptographic mechanisms to protect the confidentiality of remote maintenance sessions.
• The switch must be running a current IOS release.
• The switch must be configured to restrict traffic destined to itself.
• The switch must be configured to block any traffic that is destined to the IP core infrastructure.
Security Management Feature - FARS Cyber Requirements
File details come from the government source that posted it. Updated .