STIGQter: STIG Summary: Router Security Requirements Guide Version: 5 Release: 2 Benchmark Date: 28 Oct 2025:

The router must use cryptographic algorithms approved by NSA to protect NSS when transporting classified traffic across an unclassified network.

DISA Rule

SV-279005r1137963_rule

Vulnerability Number

V-279005

Group Title

SRG-NET-000352

Rule Version

SRG-NET-000352-RTR-000001

Severity

CAT II

CCI(s)

• CCI-002450 - Implement organization-defined types of cryptography for each specified cryptography use.

Weight

10

Fix Recommendation

Configure the router to use cryptographic algorithms approved by NSA to protect NSS when transporting classified traffic across an unclassified network.

Check Contents

Determine if the router uses cryptographic algorithms approved by NSA to protect NSS when transporting classified traffic across an unclassified network.

If the router does not use cryptographic algorithms approved by NSA to protect NSS when transporting classified traffic across an unclassified network, this is a finding.

Vulnerability Number

V-279005

Documentable

False

Rule Version

SRG-NET-000352-RTR-000001

Severity Override Guidance

Determine if the router uses cryptographic algorithms approved by NSA to protect NSS when transporting classified traffic across an unclassified network.

If the router does not use cryptographic algorithms approved by NSA to protect NSS when transporting classified traffic across an unclassified network, this is a finding.

Check Content Reference

M

Target Key

2917