Attachment 4 - FARS Cyber Requirements.pdf
PDF 77 KB Posted
- Attached to
- FARS PHASE II UPGRADE/FIREWORKS INSTALL
- Solicitation number
- LT2517250001
About this file
This document details the Security Management Feature requirements for network switches in a federal contract opportunity, specifically outlining nine critical cybersecurity configuration mandates. The requirements include unique identification and authentication of network-connected endpoint devices, prohibition of unnecessary and non-secure functions, cryptographic password storage, automatic termination of inactive network connections, and implementation of FIPS-validated cryptographic mechanisms to protect remote maintenance session integrity and confidentiality. Additional requirements mandate running a current IOS release, restricting traffic destined to the switch itself, and blocking traffic to the IP core infrastructure, demonstrating comprehensive network security protocols for the proposed system upgrade.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Attachment 1 - Performance Work Statement (PWS).pdf | ||
| Sources Sought_FARS PHASE II.docx | DOCX document | |
| Attachment 2 - FARS Equipment List.pdf | ||
| Attachment 3 - FireWorks System Equipment List.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Security Management Feature - FARS Cyber Requirements
• The switch must uniquely identify and authenticate all network-connected endpoint devices before establishing any connection.
• The switch must be configured to prohibit the use of all unnecessary and non-secure functions and services.
• The switch must only store cryptographic representations of passwords.
• The switch must be configured to terminate all network connections associated with device management after five minutes of inactivity.
• The switch must be configured to use FIPS-validated Keyed-Hash Message Authentication Code
(HMAC) to protect the integrity of remote maintenance sessions.
• The switch must be configured to implement cryptographic mechanisms to protect the confidentiality of remote maintenance sessions.
• The switch must be running a current IOS release.
• The switch must be configured to restrict traffic destined to itself.
• The switch must be configured to block any traffic that is destined to the IP core infrastructure.
Security Management Feature - FARS Cyber Requirements
File details come from the government source that posted it. Updated .