The network device must enforce strict adherence to protocol format.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000200-NDM-NA	SRG-NET-000200-NDM-NA	SRG-NET-000200-NDM-NA_rule		Medium

Description
Crafted packets not conforming to Institute of Electrical and Electronics Engineers (IEEE) standards can be used by attackers to exploit a host's protocol stack to create a denial of service or force a device reset, to bypass security gateway filtering, or to compromise a vulnerable device. It is imperative these packets are recognized and discarded at the network perimeter. This requirement is applicable to specific devices and does not involve the management of a network device.

Description

Crafted packets not conforming to Institute of Electrical and Electronics Engineers (IEEE) standards can be used by attackers to exploit a host's protocol stack to create a denial of service or force a device reset, to bypass security gateway filtering, or to compromise a vulnerable device. It is imperative these packets are recognized and discarded at the network perimeter. This requirement is applicable to specific devices and does not involve the management of a network device.

STIG	Date
Network Device Management Security Requirements Guide	2013-07-30

Details

Check Text ( C-SRG-NET-000200-NDM-NA_chk )
This requirement is NA for network device management.

Fix Text (F-SRG-NET-000200-NDM-NA_fix)
This requirement is NA for network device management.