STIGQter: STIG Summary: Network Infrastructure Policy Security Technical Implementation Guide Version: 9 Release: 10 Benchmark Date: 24 Jan 2020:

All Releasable Local Area Network (REL LAN) environments must be documented in the System Security Authorization Agreement (SSAA).

DISA Rule

SV-12654r2_rule

Vulnerability Number

V-12101

Group Title

REL LAN environments are not documented in SSAA

Rule Version

NET1815

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

The ISSM will document GRE tunnels defined on a premise or edge SIPRNet router that have an endpoint within the REL IP address space.

Check Contents

Interview the ISSM and review the SSAA. GRE tunnels found on a premise or edge SIPRNet router that have an endpoint within the REL IP address space must be documented in the SSAA.

If the REL LAN has not been documented in the SSAA, this is a finding.

Vulnerability Number

V-12101

Documentable

False

Rule Version

NET1815

Severity Override Guidance

Interview the ISSM and review the SSAA. GRE tunnels found on a premise or edge SIPRNet router that have an endpoint within the REL IP address space must be documented in the SSAA.

If the REL LAN has not been documented in the SSAA, this is a finding.

Check Content Reference

I

Responsibility

Other

Target Key

838

Comments