UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Server VLAN interfaces must be protected by restrictive ACLs using a deny-by-default security posture.


Overview

Finding ID Version Rule ID IA Controls Severity
V-18522 NET-SRVFRM-003 SV-20061r2_rule ECND-1 ECSC-1 Medium
Description
Protecting data sitting in a server VLAN is necessary and can be accomplished using access control lists on VLANs provisioned for servers. Without proper access control of traffic entering or leaving the server VLAN, potential threats such as a denial of service, data corruption, or theft could occur, resulting in the inability to complete mission requirements by authorized users.
STIG Date
Perimeter Router Security Technical Implementation Guide 2015-07-01

Details

Check Text ( C-21297r5_chk )
Review the device configuration to validate an ACL with a deny-by-default security posture has been implemented on the server VLAN interface.
Fix Text (F-19125r4_fix)
Configure an ACL to protect the server VLAN interface. The ACL must be in a deny-by-default security posture.