The test and development infrastructure must use a DMZ to import and export data between test and development environments and DoD operational networks.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-39658	ENTD0190	SV-51525r1_rule	DCSP-1 EBBD-1 EBBD-2 EBBD-3 ECSC-1	Medium

Description
Most systems that reside in the test and development environment require external access using a DoD network as the transport mechanism. Logical access control mechanisms, such as strictly controlled ACLs for both ingress and egress traffic, must be utilized at the environment boundary. The permissible activities for test and development environments include, but are not limited to, user functional acceptance of a product, final stage testing, and development. Downloading software from the Internet is acceptable for the environment; however, establish a DMZ for such purposes.

Description

Most systems that reside in the test and development environment require external access using a DoD network as the transport mechanism. Logical access control mechanisms, such as strictly controlled ACLs for both ingress and egress traffic, must be utilized at the environment boundary. The permissible activities for test and development environments include, but are not limited to, user functional acceptance of a product, final stage testing, and development. Downloading software from the Internet is acceptable for the environment; however, establish a DMZ for such purposes.

STIG	Date
Test and Development Zone B Security Technical Implementation Guide	2015-12-17

Details

Check Text ( C-46798r2_chk )
Determine whether there is a DMZ properly configured for traffic entering and leaving the test and development environment. If a DMZ for traffic entering and leaving the test and development environment is not implemented, this is a finding.

Fix Text (F-44633r2_fix)
Configure and implement a DMZ for traffic entering and leaving the test and development environment.