The operating system must employ a deny-all, allow-by-exception firewall policy for allowing connections to other systems.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-56581	SRG-OS-000480-GPOS-00231	SV-70841r1_rule		Medium

Description
Failure to restrict network connectivity only to authorized systems permits inbound connections from malicious systems. It also permits outbound connections that may facilitate exfiltration of DoD data.

STIG	Date
General Purpose Operating System SRG	2014-12-17

Details

Check Text ( C-57153r1_chk )
Verify the operating system employs a deny-all, allow-by-exception firewall policy for allowing connections to other systems. If it does not, this is a finding.

Fix Text (F-61479r1_fix)
Configure the operating system to employ a deny-all, allow-by-exception firewall policy for allowing connections to other systems.