STIGQter: STIG Summary: Network Infrastructure Policy Security Technical Implementation Guide Version: 10 Release: 7 Benchmark Date: 24 Oct 2024:

A deny-by-default security posture must be implemented for traffic entering and leaving the enclave.

DISA Rule

SV-251368r853653_rule

Vulnerability Number

V-251368

Group Title

NET0369

Rule Version

NET0369

Severity

CAT I

CCI(s)

• CCI-002398 - Detect outgoing communications traffic posing a threat to external systems.
• CCI-002399 - Deny outgoing communications traffic posing a threat to external systems.

Weight

10

Fix Recommendation

Implement a deny-by-default security posture on either the enclave perimeter router or firewall.

Check Contents

Determine if a deny-by-default security posture has been implemented for both inbound and outbound traffic on the perimeter router or firewall.

If a deny-by-default security posture has not been implemented at the network perimeter, this is a finding.

Vulnerability Number

V-251368

Documentable

False

Rule Version

NET0369

Severity Override Guidance

Determine if a deny-by-default security posture has been implemented for both inbound and outbound traffic on the perimeter router or firewall.

If a deny-by-default security posture has not been implemented at the network perimeter, this is a finding.

Check Content Reference

M

Target Key

5444