UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The IAO/NSO will ensure that workstation clients’ real IPv4 addresses are not revealed to the public by implementing NAT on the firewall or the router.


Overview

Finding ID Version Rule ID IA Controls Severity
V-3005 NET0190 SV-3005r1_rule EBBD-1 EBBD-2 EBBD-3 ECSC-1 Low
Description
NAT works well with the implementation of RFC 1918 addressing scheme, it also has the privacy benefit of hiding real internal addresses. An attacker can learn more about a site’s private network once it has discovered the real IP addresses of the hosts within.
STIG Date
Perimeter Router Security Technical Implementation Guide 2015-07-01

Details

Check Text ( C-3436r1_chk )
Review the firewall or premise router configuration to determine if NAT has been implemented.
Fix Text (F-3030r1_fix)
Implement Network Address Translation (NAT) on the firewall or premise router for NIPRNet Enclaves.