Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
SRG-NET-000122-FW-000077 | SRG-NET-000122-FW-000077 | SRG-NET-000122-FW-000077_rule | Medium |
Description |
---|
Changes to any software components of the firewall can have significant effects on the overall security of the network. Therefore, only qualified and authorized individuals should be allowed administrative access to the firewall for implementing any changes or upgrades to system components. Enforcing a two-person rule will ensure the changes have been approved. |
STIG | Date |
---|---|
Firewall Security Requirements Guide | 2012-12-10 |
Check Text ( C-SRG-NET-000122-FW-000077_chk ) |
---|
Review the configuration to verify the settings required to implement two-person rule are enabled. If the two-person rule is required and the firewall has not been configured to automate the requirement, this is a finding. |
Fix Text (F-SRG-NET-000122-FW-000077_fix) |
---|
Configure the firewall implementation to require two-person rule for organizationally defined privileged commands. |