Applications functioning in the capacity of a firewall must check incoming communications to ensure the communications are coming from an authorized source and routed to an authorized destination.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-32553	SRG-APP-000249-DB-NA	SV-42890r1_rule		Medium

Description

In regards to boundary controls such as routers and firewalls, examples of restricting and prohibiting communications are: restricting external web traffic only to organizational web servers within managed interfaces and prohibiting external traffic that appears to be spoofing an internal address as the source. This requirement applies to applications functioning as firewalls and is NA for databases.

STIG	Date
Database Security Requirements Guide	2012-07-02

Details

Check Text ( C-40992r1_chk )
This check is NA for databases.

Fix Text (F-36468r1_fix)
This fix is NA for databases.