Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-55731 | SRG-NET-000019-RTR-000007 | SV-69985r1_rule | Medium |
Description |
---|
An inactive interface is rarely monitored or controlled and may expose a network to an undetected attack on that interface. Unauthorized personnel with access to the communication facility could gain access to a router by connecting to a configured interface that is not in use. |
STIG | Date |
---|---|
Router Security Requirements Guide | 2014-11-18 |
Check Text ( C-56297r1_chk ) |
---|
Verify inactive interfaces on the router are disabled. If there are any inactive interfaces enabled on the router, this is a finding. |
Fix Text (F-60601r1_fix) |
---|
Remove subinterfaces and disable any inactive ports on the router. |