Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Forescout must be configured so client machines do not communicate with other network devices in the DMZ or subnet except as needed to perform an access client assessment or to identify themselves. This is required for compliance with C2C Step 2.
Description
Discussion Text
Devices not compliant with DoW secure configuration policies are vulnerable to attack. While endpoints are undergoing NAC authorization assessment, they must communicate only with the NAC or identified systems that evaluate, remediate, or otherwise assist in evaluating endpoint compliance with policy. These devices should not communicate with other hosts in the DMZ or other network segments.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.