Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-22421 | GEN003619 | SV-42308r1_rule | ECSC-1 | Medium |
Description |
---|
Some systems have the ability to bridge or switch frames (link-layer forwarding) between multiple interfaces. This can be useful in a variety of situations but, if enabled when not needed, has the potential to bypass network partitioning and security. |
STIG | Date |
---|---|
Solaris 9 X86 Security Technical Implementation Guide | 2012-05-25 |
Check Text ( C-40638r1_chk ) |
---|
Ask the system administrator if network bridging software is installed on the system or the system is configured for network bridging. If network bridging software is installed or the system is configured for network bridging, this is a finding. |
Fix Text (F-35941r1_fix) |
---|
Remove the network bridging software and configuration from the system. |