Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
For zones split between the external and internal sides of a network, the resource records (RRs) for the external hosts must be separate from the RRs for the internal hosts.
Description
Discussion Text
Authoritative name servers for an enterprise may be configured to receive requests from both external and internal clients.
External clients need to receive RRs that pertain only to public services (public web server, mail server, etc.)
Internal clients need to receive RRs pertaining to public services as well as internal hosts.
Organizations using dedicated internal systems and separate dedicated external systems are inherently more secure than using a single system accessed by both internal and external clients.
DNS Views allow a single name server to provide different response data based on a client match list or Access Control List.
External clients need to receive RRs that pertain only to public services (public web server, mail server, etc.)
Internal clients need to receive RRs pertaining to public services as well as internal hosts.
Organizations using dedicated internal systems and separate dedicated external systems are inherently more secure than using a single system accessed by both internal and external clients.
DNS Views allow a single name server to provide different response data based on a client match list or Access Control List.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.