STIGQter: STIG Summary: Network Infrastructure Policy Security Technical Implementation Guide Version: 10 Release: 7 Benchmark Date: 24 Oct 2024:

All hosted NIPRNet-only applications must be located in a local enclave Demilitarized Zone (DMZ).

DISA Rule

SV-251364r853651_rule

Vulnerability Number

V-251364

Group Title

NET0346

Rule Version

NET0346

Severity

CAT II

CCI(s)

• CCI-002395 - Implement subnetworks for publicly accessible system components that are physically and/or logically separated from internal organizational networks.

Weight

10

Fix Recommendation

Implement and move NIPRNet-only applications to a local enclave DMZ.

Check Contents

Review the network topology diagram and interview the ISSO to verify that all NIPRNet-only applications are located in a local enclave DMZ.

If there are any NIPRNet-only applications not hosted in the enclave's DMZ, this is a finding.

Vulnerability Number

V-251364

Documentable

False

Rule Version

NET0346

Severity Override Guidance

Review the network topology diagram and interview the ISSO to verify that all NIPRNet-only applications are located in a local enclave DMZ.

If there are any NIPRNet-only applications not hosted in the enclave's DMZ, this is a finding.

Check Content Reference

M

Target Key

5444