The network element must be configured to automatically check for security updates to the application software on an organizationally defined frequency.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000242-FW-NA	SRG-NET-000242-FW-NA	SRG-NET-000242-FW-NA_rule		Low

Description
Security relevant software updates must be installed promptly and updated in order to mitigate the exploitation of known vulnerabilities. Flaws discovered during security assessments, continuous monitoring, incident response activities, or information system error handling must also be addressed expeditiously. By requiring the automated update of application software on a periodic schedule, flaws and newly discovered attack vendors will be remediated in a timely manner. This requirement applies to flaw remediation systems. Flaw remediation is not a function of the firewall.

Description

Security relevant software updates must be installed promptly and updated in order to mitigate the exploitation of known vulnerabilities. Flaws discovered during security assessments, continuous monitoring, incident response activities, or information system error handling must also be addressed expeditiously. By requiring the automated update of application software on a periodic schedule, flaws and newly discovered attack vendors will be remediated in a timely manner. This requirement applies to flaw remediation systems. Flaw remediation is not a function of the firewall.

STIG	Date
Firewall Security Requirements Guide	2012-12-10

Details

Check Text ( C-SRG-NET-000242-FW-NA_chk )
This requirement is NA for firewall. No fix required.

Fix Text (F-SRG-NET-000242-FW-NA_fix)
This requirement is NA for firewall. No fix required.