STIGQter: STIG Summary: Router Security Requirements Guide Version: 5 Release: 2 Benchmark Date: 28 Oct 2025:

The multicast Rendezvous Point (RP) router must be configured to filter Protocol Independent Multicast (PIM) Register messages received from the Designated Router (DR) for any undesirable multicast groups and sources.

DISA Rule

SV-207118r1137930_rule

Vulnerability Number

V-207118

Group Title

SRG-NET-000019

Rule Version

SRG-NET-000019-RTR-000013

Severity

CAT III

CCI(s)

• CCI-001414 - Enforce approved authorizations for controlling the flow of information between connected systems based on organization-defined information flow control policies.

Weight

10

Fix Recommendation

Configure the RP router to filter PIM register messages received from a multicast DR for any undesirable multicast groups or sources.

Check Contents

Verify the RP router is configured to filter PIM register messages.

If the RP router peering with PIM-SM routers is not configured with a PIM import policy to block registration messages for any undesirable multicast groups and sources, this is a finding.

Vulnerability Number

V-207118

Documentable

False

Rule Version

SRG-NET-000019-RTR-000013

Severity Override Guidance

Verify the RP router is configured to filter PIM register messages.

If the RP router peering with PIM-SM routers is not configured with a PIM import policy to block registration messages for any undesirable multicast groups and sources, this is a finding.

Check Content Reference

M

Target Key

2917