STIGQter: STIG Summary: Network Infrastructure Policy Security Technical Implementation Guide Version: 10 Release: 7 Benchmark Date: 24 Oct 2024:

Multi-Protocol Labeled Switching (MPLS) labels must not be exchanged between the enclaves edge routers and any external neighbor routers.

DISA Rule

SV-251384r806107_rule

Vulnerability Number

V-251384

Group Title

NET2001

Rule Version

NET2001

Severity

CAT II

CCI(s)

CCI-001097 - Monitor and control communications at the external managed interfaces to the system and at key managed interfaces within the system.

Weight

Fix Recommendation

Disable LDP and RSVP on DISN-facing interfaces on all perimeter routers.

Check Contents

Review the DISN-facing interfaces of the enclave perimeter routers to verify that LDP or RSVP is not enabled.

If any of these interfaces are LDP or RSVP enabled, this is a finding.

Vulnerability Number

V-251384

Documentable

False

Rule Version

NET2001

Severity Override Guidance

Review the DISN-facing interfaces of the enclave perimeter routers to verify that LDP or RSVP is not enabled.

If any of these interfaces are LDP or RSVP enabled, this is a finding.

Check Content Reference

Target Key

5444