Any software application designed to function as a firewall must be capable employing a default deny all configuration.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-32560	SRG-APP-000256-DB-NA	SV-42897r1_rule		Medium

Description
A firewall default deny is a firewall configuration setting that will force the administrator to explicitly allow network or application traffic rather than allowing all traffic by default. The purpose is to prevent unmanaged access into the internal network or in the case of an application firewall, to application content, features, or functionality. This requirement is specific to applications acting as a firewall. This requirement is NA for databases.

Description

A firewall default deny is a firewall configuration setting that will force the administrator to explicitly allow network or application traffic rather than allowing all traffic by default. The purpose is to prevent unmanaged access into the internal network or in the case of an application firewall, to application content, features, or functionality. This requirement is specific to applications acting as a firewall. This requirement is NA for databases.

STIG	Date
Database Security Requirements Guide	2012-07-02

Details

Check Text ( C-40999r1_chk )
This check is NA for databases.

Fix Text (F-36475r1_fix)
This fix is NA for databases.