UCF STIG Viewer Logo

Connections between the DoD enclave and the Internet or other public or commercial wide area networks must require a DMZ.


Overview

Finding ID Version Rule ID IA Controls Severity
V-70421 APSC-DV-003350 SV-85043r1_rule Medium
Description
In order to protect DoD data and systems, all remote access to DoD information systems must be mediated through a managed access control point, such as a remote access server in a DMZ.
STIG Date
Application Security and Development Security Technical Implementation Guide 2018-12-24

Details

Check Text ( C-70875r1_chk )
Interview the application representative and determine if the application is publicly accessible.

If the application is publicly accessible and traffic is not being routed through a DMZ, this is a finding.
Fix Text (F-76657r1_fix)
Setup a DMZ between DoD and public networks.