STIGQter: STIG Summary: Router Security Requirements Guide Version: 5 Release: 2 Benchmark Date: 28 Oct 2025:

When transferring information between different security domains, the router must apply the same security policy filtering to metadata as it applies to data payloads.

DISA Rule

SV-279004r1137960_rule

Vulnerability Number

V-279004

Group Title

SRG-NET-000328

Rule Version

SRG-NET-000328-RTR-000001

Severity

CAT II

CCI(s)

• CCI-002211 - When transferring information between different security domains, implement organization-defined security or privacy filters on metadata.
• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure the router to meet the requirement.

Check Contents

The router must apply the same security policy filtering to metadata as it applies to data payloads. Verify the router is configured to meet the requirements.

If the router does not meet the requirement, this is a finding.

Vulnerability Number

V-279004

Documentable

False

Rule Version

SRG-NET-000328-RTR-000001

Severity Override Guidance

The router must apply the same security policy filtering to metadata as it applies to data payloads. Verify the router is configured to meet the requirements.

If the router does not meet the requirement, this is a finding.

Check Content Reference

M

Target Key

2917