UCF STIG Viewer Logo

The SA must configure the firewall for the minimum content and protocol inspection requirements.


Overview

Finding ID Version Rule ID IA Controls Severity
V-14643 NET0366 SV-15269r2_rule Medium
Description
Creating a filter to allow a port or service through the firewall without content or protocol inspection creates a direct connection between the host in the private network and a host on the outside; thereby, bypassing additional security measures that could be provided. This places the internal host at a greater risk of exploitation that could make the entire network vulnerable to an attack.
STIG Date
Firewall Security Technical Implementation Guide - Cisco 2017-12-07

Details

Check Text ( C-12659r3_chk )
Review the firewall configuration and verify both ingress and egress traffic is being inspected. If any traffic is able to leave or enter the enclave without being inspected by the firewall, this is a finding.
Fix Text (F-14103r2_fix)
Ensure the firewall has content and protocol inspection implemented for all ingress and egress traffic.