Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-18834 | SRC-NAC-070 | SV-20587r1_rule | Low |
Description |
---|
Automated and manual procedures for remediation for critical security updates will be managed differently. Continuing to assess and remediate endpoints with risks that could endanger the network could impact network usage for all users. |
STIG | Date |
---|---|
Remote Access Policy STIG | 2016-03-28 |
Check Text ( C-22569r1_chk ) |
---|
Verify existence of a procedure for blacklisting and terminating when critical security issues are found during a security policy assessment. |
Fix Text (F-19506r1_fix) |
---|
Ensure during security policy assessment, a procedure exists such that when critical security issues are found that put the network at risk, the remote endpoint will be placed immediatly on the “blacklist” and the connection will be terminated. |