STIGQter: STIG Summary: Network Infrastructure Policy Security Technical Implementation Guide Version: 10 Release: 7 Benchmark Date: 24 Oct 2024:

Tunneling of classified traffic across an unclassified IP transport network or service provider backbone must be documented in the enclaves security authorization package and an Approval to Connect (ATC), or an Interim ATC must be issued by DISA prior to implementation.

DISA Rule

SV-251349r916231_rule

Vulnerability Number

V-251349

Group Title

NET-TUNL-028

Rule Version

NET-TUNL-028

Severity

CAT I

CCI(s)

• CCI-002396 - Protect the confidentiality and integrity of the information being transmitted across each interface for each external telecommunication service.
• CCI-002418 - Protect the confidentiality and/or integrity of transmitted information.

Weight

10

Fix Recommendation

Document the tunneling of classified traffic in the security authorization package and the ATC or Interim ATC.

Check Contents

Review the enclave's security authorization package and the ATC or Interim ATC amending the connection approval received.

If the tunneling of classified traffic is not documented in the security authorization package and an ATC or Interim ATC, this is a finding.

Vulnerability Number

V-251349

Documentable

False

Rule Version

NET-TUNL-028

Severity Override Guidance

Review the enclave's security authorization package and the ATC or Interim ATC amending the connection approval received.

If the tunneling of classified traffic is not documented in the security authorization package and an ATC or Interim ATC, this is a finding.

Check Content Reference

M

Target Key

5444