Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
SRG-NET-000195-NDM-NA | SRG-NET-000195-NDM-NA | SRG-NET-000195-NDM-NA_rule | Medium |
Description |
---|
Spoofing source addresses occurs when a malicious user outside the network has created packets with a source address belonging to the private address space of the target network. This is done in an attempt to slip through the perimeter as a member host to gain access to internal resources or to conceal identity to perform an attack. It is imperative that all inbound and outbound traffic with spoofed or invalid source addresses are blocked. If inbound traffic is not monitored to make sure source and destination of packets are authorized, then malicious users outside the network may be able to send packets to the private, trusted network. This requirement is applicable to specific devices and does not involve the management of a network device. |
STIG | Date |
---|---|
Network Device Management Security Requirements Guide | 2013-07-30 |
Check Text ( C-SRG-NET-000195-NDM-NA_chk ) |
---|
This requirement is NA for network device management. |
Fix Text (F-SRG-NET-000195-NDM-NA_fix) |
---|
This requirement is NA for network device management. |