← Back to Application Security and Development Security Technical Implementation Guide

V-222671

CAT II (Medium)

Connections between the DoW enclave and the Internet or other public or commercial wide area networks must require a DMZ.

Rule ID

SV-222671r1263624_rule

STIG

Application Security and Development Security Technical Implementation Guide

Version

V6R5

CCIs

CCI-001119

Discussion

In order to protect DoW data and systems, all remote access to DoW information systems must be mediated through a managed access control point, such as a remote access server in a DMZ.

Check Content

Interview the application representative and determine if the application is publicly accessible.

If the application is publicly accessible and traffic is not being routed through a DMZ, this is a finding.

Fix Text

Setup a DMZ between DoW and public networks.