Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The ICS must be configured to protect against known types of denial-of-service (DoS) attacks by enabling JITC mode.
Description
Discussion Text
This configuration protects the confidentiality of Web UI sessions and guards against DoS attacks. If JITC Mode is enabled, the following protections are enforced:
- Log support for detection and prevention of SMURF/SYN Flood/SSL Replay Attack.
- Disable ICMPv6 echo response for multicast echo request.
- Disable ICMPv6 destination unreachable response.
- Password Strengthening.
- Notification for unsuccessful admin login attempts.
- Reauthentication of admin users.
- Notification on admin status change.
- Disable Roaming Sessions.
- Disable Split Tunneling.
- IP Lockout restrictions.
- Disable Allowing Saving Login Information.
- Disable Persistent Sessions.
- Remove Browser Session Cookie.
- Enable Server Certificate Trust Enforcement.
When JITC and FIPS mode are enabled, this enables DoS attacks such as flooding and replay attack audit logs inherently. JITC and FIPS mode are required for ICS use in DOD. When the NDcPP option is enabled, only NDcPP approved crypto algorithms are allowed.
- Log support for detection and prevention of SMURF/SYN Flood/SSL Replay Attack.
- Disable ICMPv6 echo response for multicast echo request.
- Disable ICMPv6 destination unreachable response.
- Password Strengthening.
- Notification for unsuccessful admin login attempts.
- Reauthentication of admin users.
- Notification on admin status change.
- Disable Roaming Sessions.
- Disable Split Tunneling.
- IP Lockout restrictions.
- Disable Allowing Saving Login Information.
- Disable Persistent Sessions.
- Remove Browser Session Cookie.
- Enable Server Certificate Trust Enforcement.
When JITC and FIPS mode are enabled, this enables DoS attacks such as flooding and replay attack audit logs inherently. JITC and FIPS mode are required for ICS use in DOD. When the NDcPP option is enabled, only NDcPP approved crypto algorithms are allowed.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.