Perimeter Router Security Technical Implementation Guide

The Perimeter Router Security Technical Implementation Guide (V8 R32) has 132 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

132STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V8 · R32

CurrentPublished Fri Jan 25 2019

Tunnel entry and exit points must be in a deny-by-default security posture.

Perimeter Router Security Technical Implementation Guide

Assessment Title

Rule Text

Tunnel entry and exit points must be in a deny-by-default security posture.

Description

Discussion Text

Having tunnels in a permit any any posture allow traffic to enter and exit the enclave without control from the Information Assurance team or SA.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-18648

Rule

SV-20240r2_rule

Severity

medium

Rule Version

NET-TUNL-007

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Follow the procedures defined in NET-TUNL-002 to determine all tunnel entry and exit points, then ensure each end-point is in a deny by default posture inbound and outbound.

Implementation Procedure

Fix Text

Apply a deny by default posture on every tunnel end-point.

STIG check 65 of 132 in the Perimeter Router STIG checklist

← Previous · V-18647Tunnel end-points must implement filters in accordance with mitigations defined in PPS Vulnerability Assessments.Next · V-19188 →The network device must have control plane protection enabled.