UCF STIG Viewer Logo

If the system is an anonymous FTP server, it must be isolated to the DMZ network.


Overview

Finding ID Version Rule ID IA Controls Severity
V-4702 GEN004840 SV-4702r2_rule EBBD-3 EBBD-2 ECSC-1 EBBD-1 Medium
Description
Anonymous FTP is a public data service which is only permitted in a server capacity when located on the DMZ network.
STIG Date
SOLARIS 9 SPARC SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-712r2_chk )
Use the command ftp to connect the system's FTP service. Attempt to log into this host with a user name of anonymous and a password of guest (also try the password of guest@mail.com). If the logon is not successful, this check is not applicable.

Ask the SA if the system is located on a DMZ network. If the system is not located on a DMZ network, this is a finding.
Fix Text (F-4630r2_fix)
Move the system to a DMZ network.