Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The IPS must monitor and control traffic at both the external and internal boundary interfaces.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| SRG-NET-000205-IDPS-000210 | SRG-NET-000205-IDPS-000210 | SRG-NET-000205-IDPS-000210_rule | Medium |
| Description |
|---|
| Monitoring and controlling both inbound and outbound and inbound network traffic adds a layer of protection to the enclave. Unlike an IDS, an IPS can both detect and take action to prevent harmful traffic from leaving the network. Blocking harmful inbound and outbound traffic can also prevent the network from being used as the source of an attack. |
| STIG | Date |
|---|---|
| IDPS Security Requirements Guide (SRG) | 2012-03-08 |
Details
| Check Text ( C-43371_chk ) |
|---|
| Verify one or more sensors are configured to monitor traffic from both internal and external interfaces. Verify rules exist to detect harmful traffic on both the external and internal boundary interfaces. If rules do not exist to monitor and control traffic at both the external and internal boundary interfaces, this is a finding. |
| Fix Text (F-43371_fix) |
|---|
| Configure the IPS with rules to monitor and control traffic at both the external and internal boundary interfaces. |