Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The firewall implementation must protect the confidentiality and integrity of system information at rest.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-37312 | SRG-NET-000238-FW-000142 | SV-49073r1_rule | Medium |
| Description |
|---|
| This requirement is intended to address the confidentiality and integrity of system information at rest (e.g., firewall rule sets or ACLs) when it is located on a storage device within the firewall or as a component of the firewall implementation. This protection is required to prevent unauthorized alteration, corruption, or disclosure of information when not stored directly on the firewall. |
| STIG | Date |
|---|---|
| Firewall Security Requirements Guide | 2013-04-24 |
Details
| Check Text ( C-45560r1_chk ) |
|---|
| Review the configuration of the firewall implementation. Verify all configuration files, system files, and logs located on storage devices within, or attached to, firewall components protect the confidentiality and integrity of the stored information. If the firewall implementation does not protect the confidentiality and integrity of data at rest, this is a finding. |
| Fix Text (F-42237r1_fix) |
|---|
| Enable integrity and confidentiality protection for stored information. |