Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-37070 | SRG-NET-000027-FW-000026 | SV-48831r1_rule | Medium |
Description |
---|
Identifying destination address for information flows within the network allows forensic reconstruction of events when required, and increases policy compliance by attributing policy violations to specific individuals. Means to enforce this enhancement include ensuring the network element authenticates the source involved in receiving information. |
STIG | Date |
---|---|
Firewall Security Requirements Guide | 2013-04-24 |
Check Text ( C-45443r1_chk ) |
---|
Review the firewall configuration to verify the firewall uniquely authenticates the destination domain (e.g., IP address) of information transfer sessions. If the firewall implementation does not uniquely authenticate destination domains for information transfer, this is a finding. |
Fix Text (F-42016r1_fix) |
---|
Configure the firewall implementation to uniquely authenticate destination domains for information transfer. |