Ports, protocols, and services visible to DoD operational networks or ISPs must follow DoDI 8551.1 policy.

From Test and Development Zone A Security Technical Implementation Guide

Part of ENTD0170 - PPS does not following the DoDI 8551.1.

Associated with IA controls: DCPP-1

SV-51487r1_rule Ports, protocols, and services visible to DoD operational networks or ISPs must follow DoDI 8551.1 policy.

Vulnerability discussion

In accordance with the DoD 8551.1 policy, the test and development environment may require external access to live operational data to perform final stage testing. All network connections for the test and development environment must make use of the PPS CAL at the appropriate boundaries.

Check content

Review the latest version of the PPS CAL for those ports, protocols, and services visible to DoD-managed components. If the organization is using ports, protocols, or services deemed not acceptable by the PPS CAL or requiring Authorization Official approval without proper documentation, this is a finding.

Fix text

Configure all ports, protocols, and services visible to DoD-managed components as described in the DoDI 8551.1 PPSM policy.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.