Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
All hosted NIPRNet-only applications must be located in a local enclave Demilitarized Zone (DMZ).
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-14638 | NET0346 | SV-15263r4_rule | Medium |
| Description |
|---|
| Without the protection of a DMZ, production networks will be prone to outside attacks as they are allowing externally accessible services to be accessed on the internal LAN. This can cause many undesired consequences such as access to the entire network, Denial of Service attacks, or theft of sensitive information. |
| STIG | Date |
|---|---|
| Network Infrastructure Policy Security Technical Implementation Guide | 2017-03-02 |
Details
| Check Text ( C-13708r10_chk ) |
|---|
| Review the network topology diagram and interview the ISSO to verify that all NIPRNet-only applications are located in a local enclave DMZ. If there are any NIPRNet-only applications not hosted in the enclave’s DMZ, this is a finding. |
| Fix Text (F-14743r6_fix) |
|---|
| Implement and move NIPRNet-only applications to a local enclave DMZ. |