Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Tunnel end-points must implement filters in accordance with mitigations defined in PPS Vulnerability Assessments.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-18647 | NET-TUNL-006 | SV-20239r2_rule | ECSC-1 | Medium |
| Description |
|---|
| Allowing unknown traffic into the enclave creates high risk and potential compromise by an intruder. Protocols used by applications the PPSM has reviewed and determined to require additional mitigation is necessary to protect the GIG. |
| STIG | Date |
|---|---|
| Perimeter L3 Switch Security Technical Implementation Guide - Cisco | 2017-12-07 |
Details
| Check Text ( C-22366r1_chk ) |
|---|
| Review procedures defined in NET-TUNL-002. After determining the final decapsulation end-points, ensure the tunnel implements protocol inspection, filtering and mitigation as defined in the PPS VA reports. |
| Fix Text (F-22659r1_fix) |
|---|
| Ensure the tunnel implements protocol inspection, filtering and mitigation as defined in the PPS VA reports. |