The network element must isolate organization defined key information, security tools mechanisms, and support components from other internal information system components via physically separate subnets.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-34146	SRG-NET-000197-DNS-NA	SV-44599r1_rule		Medium

Description
Implementing defense-in-depth by deploying various network security elements at strategic locations and segregating the enclave into separate subnets with unique security policies to provide specific services (public content, remote access, perimeter protection, etc.) is the framework required for securing the enclave. Network segregation is not a function of DNS.

STIG	Date
Domain Name System (DNS) Security Requirements Guide	2012-10-24

Details

Check Text ( C-42106r1_chk )
This is not a function of DNS.

Fix Text (F-38056r1_fix)
This requirement is NA for DNS. No fix required.