A Network Infrastructure STIG compliant DMZ has not been established for the downloading of applicable software for a Zone B environment.

Associated with IA controls: EBPW-1

SV-14994r1_rule A Network Infrastructure STIG compliant DMZ has not been established for the downloading of applicable software for a Zone B environment.

Vulnerability discussion

The systems that reside in Zone B require external access utilizing a DoD network as the transport mechanism. Logical access control mechanisms will be utilized at the network boundary such as strictly controlled ACLs with no ingress traffic origination and established sessions only. Test or development traffic will be isolated/separated from production traffic. The permissible activities for Zone B environments include, but are not limited to, user functional acceptance of a product, final stage testing, and Development. Downloading software from the Internet is acceptable in Zone B, however, a DMZ with gateway must be established for such purposes.

Check content

Interview the IAO to determine if there is a DMZ with gateway in place for Internet access from a Zone B environment. Work with the network reviewer to determine if there is a DMZ in place for such purposes and that the traffic is restricted from Zone B to/from the DMZ only.

Fix text

The IAO will ensure a Network Infrastructure STIG compliant DMZ is established for the downloading of applicable software, if necessary.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.