Infrastructure Router Security Technical Implementation Guide

The Infrastructure Router Security Technical Implementation Guide (V8 R29) has 78 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

78STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V8 · R29

CurrentPublished Fri Jan 25 2019

IP source routing must be disabled.

Infrastructure Router Security Technical Implementation Guide

Assessment Title

Rule Text

IP source routing must be disabled.

Description

Discussion Text

Source routing is a feature of IP, whereby individual packets can specify routes. This feature is used in several different network attacks by bypassing perimeter and internal defense mechanisms.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-3081

Rule

SV-3081r3_rule

Severity

medium

Rule Version

NET0770

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review the configuration to determine if source routing is disabled.

If IP source routing is enabled, this is a finding.

Implementation Procedure

Fix Text

Configure the router to disable IP source routing.

STIG check 61 of 78 in the Infrastructure Router STIG checklist

← Previous · V-3079Network devices must have the Finger service disabled.Next · V-3085 →Network devices must have HTTP service for administrative access disabled.