The network element must protect non-local maintenance sessions by separating the maintenance session from other network sessions with the device, by using either physically separated communications paths, or logically separated communications paths based upon encryption.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000175-FW-NA	SRG-NET-000175-FW-NA	SRG-NET-000175-FW-NA_rule		Medium

Description
Non-local maintenance and diagnostic activities are those activities conducted by individuals communicating through a network; either an external network (e.g., the Internet) or an internal network. Local maintenance and diagnostic activities are those activities carried out by individuals physically present at the information system or information system component and not communicating across a network connection. It is not the function of the firewall to provide traffic separation based on encryption or physical separation.

Description

Non-local maintenance and diagnostic activities are those activities conducted by individuals communicating through a network; either an external network (e.g., the Internet) or an internal network. Local maintenance and diagnostic activities are those activities carried out by individuals physically present at the information system or information system component and not communicating across a network connection. It is not the function of the firewall to provide traffic separation based on encryption or physical separation.

STIG	Date
Firewall Security Requirements Guide	2012-12-10

Details

Check Text ( C-SRG-NET-000175-FW-NA_chk )
This requirement is NA for firewall. No fix required.

Fix Text (F-SRG-NET-000175-FW-NA_fix)
This requirement is NA for firewall. No fix required.