The network device must protect against or limit the effects of denial of service attacks.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000191-NDM-NA	SRG-NET-000191-NDM-NA	SRG-NET-000191-NDM-NA_rule		High

Description
This control requires denial of service protection for the network device application. A denial of service attack against the network device can leave the network without a vital security protection, leaving the network open to attack. Use of multiple/distributed network devices, load balancers, increasing log capacity, and providing service redundancy will reduce the network device's susceptibility to denial of service attacks directed at the network devices themselves or at other information systems on the network. This requirement is applicable to specific devices and does not involve the management of a network device.

Description

This control requires denial of service protection for the network device application. A denial of service attack against the network device can leave the network without a vital security protection, leaving the network open to attack. Use of multiple/distributed network devices, load balancers, increasing log capacity, and providing service redundancy will reduce the network device's susceptibility to denial of service attacks directed at the network devices themselves or at other information systems on the network. This requirement is applicable to specific devices and does not involve the management of a network device.

STIG	Date
Network Device Management Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000191-NDM-NA_chk )
This requirement is NA for network device management.

Fix Text (F-SRG-NET-000191-NDM-NA_fix)
This requirement is NA for network device management.