Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
SRG-NET-000233-IDPS-000190 | SRG-NET-000233-IDPS-000190 | SRG-NET-000233-IDPS-000190_rule | Medium |
Description |
---|
Peering neighbors must have a level of trust with each other since information being shared is used to provide network services, connectivity, and optimized routing. Corrupted or erroneous information shared between the IDPS can disrupt network operations by creating non-optimized forwarding of traffic and network outages. Identifying source and destination addresses for information flows within the network allows forensic reconstruction of events when required, and increases policy compliance by attributing policy violations to specific individuals. Means to enforce this enhancement include ensuring the IDPS authenticates the source involved in sending the information. IDPS generated, unique session identifier must also be used to reduce the risk of session hi-jacking. |
STIG | Date |
---|---|
IDPS Security Requirements Guide (SRG) | 2012-03-08 |
Check Text ( C-43343_chk ) |
---|
Verify the system is configured to allow only system generated session identifiers for communications. If the IDPS is not configured to allow only system generated session identifiers for communications this is a finding. |
Fix Text (F-43343_fix) |
---|
Configure the IDPS components to authenticate the source involved in sending the information. Configure the system to allow only system generated session identifiers for communications. |