Perimeter Router Security Technical Implementation Guide

The Perimeter Router Security Technical Implementation Guide (V8 R32) has 132 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

132STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V8 · R32

CurrentPublished Fri Jan 25 2019

Tunnel end-points must implement filters in accordance with mitigations defined in PPS Vulnerability Assessments.

Perimeter Router Security Technical Implementation Guide

Assessment Title

Rule Text

Tunnel end-points must implement filters in accordance with mitigations defined in PPS Vulnerability Assessments.

Description

Discussion Text

Allowing unknown traffic into the enclave creates high risk and potential compromise by an intruder. Protocols used by applications the PPSM has reviewed and determined to require additional mitigation is necessary to protect the GIG.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-18647

Rule

SV-20239r2_rule

Severity

medium

Rule Version

NET-TUNL-006

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review procedures defined in NET-TUNL-002. After determining the final decapsulation end-points, ensure the tunnel implements protocol inspection, filtering and mitigation as defined in the PPS VA reports.

Implementation Procedure

Fix Text

Ensure the tunnel implements protocol inspection, filtering and mitigation as defined in the PPS VA reports.

STIG check 64 of 132 in the Perimeter Router STIG checklist

← Previous · V-18640Tunneled packets must be filtered at the tunnel exit point.Next · V-18648 →Tunnel entry and exit points must be in a deny-by-default security posture.