The network element must allow the association of security attributes with information by authorized system administrators.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000060-FW-NA	SRG-NET-000060-FW-NA	SRG-NET-000060-FW-NA_rule		Medium

Description
If unauthorized individuals have permission to change security attribute information associations, these individuals may compromise information flow and access control attributes, thus adversely impacting network availability or gaining unauthorized access to the information. The support provided by network elements may include: (i) Prompting users to select specific security attributes to be associated with specific information objects; (ii) Employing automated mechanisms for categorizing information with appropriate attributes based on defined policies; or (iii) Ensuring the combination of selected security attributes selected is valid. Note that organizations must consider the creation, deletion, or modification of security attributes when defining auditable events. Supporting the association of security attributes with information is not a function of the firewall application.

Description

If unauthorized individuals have permission to change security attribute information associations, these individuals may compromise information flow and access control attributes, thus adversely impacting network availability or gaining unauthorized access to the information. The support provided by network elements may include: (i) Prompting users to select specific security attributes to be associated with specific information objects; (ii) Employing automated mechanisms for categorizing information with appropriate attributes based on defined policies; or (iii) Ensuring the combination of selected security attributes selected is valid. Note that organizations must consider the creation, deletion, or modification of security attributes when defining auditable events. Supporting the association of security attributes with information is not a function of the firewall application.

STIG	Date
Firewall Security Requirements Guide	2012-12-10

Details

Check Text ( C-SRG-NET-000060-FW-NA_chk )
This requirement is NA for firewall. No fix required.

Fix Text (F-SRG-NET-000060-FW-NA_fix)
This requirement is NA for firewall. No fix required.