The network element must dynamically reconfigure security attributes in accordance with an identified security policy as information is created and combined.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000057-FW-NA	SRG-NET-000057-FW-NA	SRG-NET-000057-FW-NA_rule		Medium

Description
Dynamic association of security attributes is appropriate whenever the security characteristics of information change over time. Security attributes may change because of information aggregation issues (i.e., the security characteristics of individual information elements are different from the combined elements), changes in individual access authorizations (i.e., privileges), and changes in the security category of information. Security attribute assignments are representations of the properties or characteristics of an entity. Thus, if a security policy is changed or data is created or changed, the system will dynamically reconfigure and apply security attributes in accordance with the security policy. Reconfiguration of security attributes is not a function of the firewall.

Description

Dynamic association of security attributes is appropriate whenever the security characteristics of information change over time. Security attributes may change because of information aggregation issues (i.e., the security characteristics of individual information elements are different from the combined elements), changes in individual access authorizations (i.e., privileges), and changes in the security category of information. Security attribute assignments are representations of the properties or characteristics of an entity. Thus, if a security policy is changed or data is created or changed, the system will dynamically reconfigure and apply security attributes in accordance with the security policy. Reconfiguration of security attributes is not a function of the firewall.

STIG	Date
Firewall Security Requirements Guide	2012-12-10

Details

Check Text ( C-SRG-NET-000057-FW-NA_chk )
This requirement is NA for firewall. No fix required.

Fix Text (F-SRG-NET-000057-FW-NA_fix)
This requirement is NA for firewall. No fix required.