STIGQter: STIG Summary: Router Security Requirements Guide Version: 5 Release: 2 Benchmark Date: 28 Oct 2025:

The out-of-band management (OOBM) gateway router must be configured to not redistribute routes between the management network routing domain and the managed network routing domain.

DISA Rule

SV-207117r1137928_rule

Vulnerability Number

V-207117

Group Title

SRG-NET-000019

Rule Version

SRG-NET-000019-RTR-000012

Severity

CAT II

CCI(s)

• CCI-001414 - Enforce approved authorizations for controlling the flow of information between connected systems based on organization-defined information flow control policies.

Weight

10

Fix Recommendation

This requirement is not applicable for the DODIN Backbone.

Configure the IGP instance used for the managed network to prohibit redistribution of routes into the IGP instance used for the management network, and vice versa.

Check Contents

This requirement is not applicable for the DODIN Backbone.

Verify the IGP instance used for the managed network does not redistribute routes into the IGP instance used for the management network, and vice versa.

If the IGP instance used for the managed network redistributes routes into the IGP instance used for the management network, or vice versa, this is a finding.

Vulnerability Number

V-207117

Documentable

False

Rule Version

SRG-NET-000019-RTR-000012

Severity Override Guidance

This requirement is not applicable for the DODIN Backbone.

Verify the IGP instance used for the managed network does not redistribute routes into the IGP instance used for the management network, and vice versa.

If the IGP instance used for the managed network redistributes routes into the IGP instance used for the management network, or vice versa, this is a finding.

Check Content Reference

M

Target Key

2917