STIGQter STIGQter: STIG Summary: Router Security Requirements Guide Version: 4 Release: 2 Benchmark Date: 23 Apr 2021:

The router must be configured to enforce approved authorizations for controlling the flow of information within the network based on organization-defined information flow control policies.

DISA Rule

SV-207097r604135_rule

Vulnerability Number

V-207097

Group Title

SRG-NET-000018

Rule Version

SRG-NET-000018-RTR-000001

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

This requirement is not applicable for the DoDIN Backbone.

Configure ACLs and filters to allow or deny traffic for specific source and destination addresses as well as ports and protocols.

Apply the filters inbound or outbound on the appropriate external and internal interfaces.

Policy-based routing can also be implemented if needed.

Check Contents

This requirement is not applicable for the DoDIN Backbone.

Review the router configuration to verify that access control lists (ACLs) and filters are configured to allow or deny traffic for specific source and destination addresses as well as ports and protocols.

These filters should be applied inbound or outbound on the appropriate external and internal interfaces.

If the router is not configured to enforce approved authorizations for controlling the flow of information within the network based on organization-defined information flow control policies, this is a finding.

Vulnerability Number

V-207097

Documentable

False

Rule Version

SRG-NET-000018-RTR-000001

Severity Override Guidance

This requirement is not applicable for the DoDIN Backbone.

Review the router configuration to verify that access control lists (ACLs) and filters are configured to allow or deny traffic for specific source and destination addresses as well as ports and protocols.

These filters should be applied inbound or outbound on the appropriate external and internal interfaces.

If the router is not configured to enforce approved authorizations for controlling the flow of information within the network based on organization-defined information flow control policies, this is a finding.

Check Content Reference

M

Target Key

2917

Comments