Tunnel end-points must implement filters in accordance with mitigations defined in PPS Vulnerability Assessments.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-18647	NET-TUNL-006	SV-20239r2_rule	ECSC-1	Medium

Description
Allowing unknown traffic into the enclave creates high risk and potential compromise by an intruder. Protocols used by applications the PPSM has reviewed and determined to require additional mitigation is necessary to protect the GIG.

STIG	Date
Perimeter L3 Switch Security Technical Implementation Guide - Cisco	2018-11-28

Details

Check Text ( C-22366r1_chk )
Review procedures defined in NET-TUNL-002. After determining the final decapsulation end-points, ensure the tunnel implements protocol inspection, filtering and mitigation as defined in the PPS VA reports.

Fix Text (F-22659r1_fix)
Ensure the tunnel implements protocol inspection, filtering and mitigation as defined in the PPS VA reports.