V-286586

Discussion

The use of unauthorized functions, ports, protocols, or services increases the attack surface of the UAG and may expose the system to exploitation. Restricting network-accessible services to only those required for mission operations reduces risk, supports least functionality principles, and helps ensure compliance with organizational PPSM requirements and vulnerability management processes.

Check Content

Verify the UAG is configured to expose only those services, ports, and protocols authorized by the organization's PPSM registration and approved system baseline.

Log in to the UAG administrative interface as an administrator.

Select "Configure Manually".

Navigate to General Settings >> Edge Service Settings. Toggle the slider to show the settings.

Review all enabled Edge services.

Review the listener ports configured for each enabled service.

Review the protocols enabled for client and administrative access.

Compare the configured services, ports, and protocols against the organization's PPSM registration and approved architecture documentation.

Verify the following:

- Only required services are enabled.
- Unused services are disabled.
- Only approved ports are listening.
- Only approved protocols are enabled.
- Services identified as unnecessary or vulnerable by the organization have been disabled or otherwise mitigated.

If any unauthorized, unnecessary, or unapproved functions, ports, protocols, or services are enabled, this is a finding.