The network element must map the authenticated identity to the user account for PKI-based authentication.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| SRG-NET-000166-FW-NA | SRG-NET-000166-FW-NA | SRG-NET-000166-FW-NA_rule | Medium |
| Description |
|---|
| Authorization for access to any network element requires an approved and assigned individual account identifier. To ensure only the assigned individual is using the account, the account must be bound to a user certificate when PKI-based authentication is implemented. Mapping the authenticated identity to the user account for PKI-based authentication is not a firewall function. |
| STIG | Date |
|---|---|
| Firewall Security Requirements Guide | 2012-12-10 |
Details
| Check Text ( C-SRG-NET-000166-FW-NA_chk ) |
|---|
| This requirement is NA for firewall. No fix required. |
| Fix Text (F-SRG-NET-000166-FW-NA_fix) |
|---|
| This requirement is NA for firewall. No fix required. |