The Program Manager and designer will ensure the application design complies with the DoD Ports and Protocols guidance.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6169	APP2100	SV-6169r1_rule	DCPP-1	Medium

Description
Failure to comply with DoD Ports, Protocols, and Services (PPS) Vulnerability Analysis and associated PPS mitigations may result in compromise of enclave boundary protections and/or functionality of the application.

STIG	Date
Application Security and Development STIG	2014-04-03

Details

Check Text ( C-2964r1_chk )
All application ports, protocols, and services needed for application operation need to be in compliance with the DoD Ports and Protocols guidance. Check (http://iase.disa.mil/ports/index.html) to ensure the ports, protocols, and services are in compliance with the PPS CAL. Check all necessary ports and protocols needed for application operation (only those accessed from outside the local enclave) are checked against the DoD Ports and Protocols guidance to ensure compliance. Identify the ports needed for the application: • Look at System Security Plan/Accreditation documentation • Ask System Administrator • Go to Network Administrator Retina Scanner • Go to Network Reviewer • If a network scan is available, use it • Use netstat/task manager • Check /etc/services 1) If the application is not in compliance with DoD Ports and Protocols guidance, it is a finding.

Check Text ( C-2964r1_chk )

All application ports, protocols, and services needed for application operation need to be in compliance with the DoD Ports and Protocols guidance.

Check (http://iase.disa.mil/ports/index.html) to ensure the ports, protocols, and services are in compliance with the PPS CAL.

Check all necessary ports and protocols needed for application operation (only those accessed from outside the local enclave) are checked against the DoD Ports and Protocols guidance to ensure compliance.

Identify the ports needed for the application:
• Look at System Security Plan/Accreditation documentation
• Ask System Administrator
• Go to Network Administrator Retina Scanner
• Go to Network Reviewer
• If a network scan is available, use it
• Use netstat/task manager
• Check /etc/services

1) If the application is not in compliance with DoD Ports and Protocols guidance, it is a finding.

Fix Text (F-4481r1_fix)
Ensure your Accreditation documentation lists all interfaces and the ports, protocols, and services used. Ensure that all ports, protocols, and services are used in accordance with the DoD PPSM.