Tunnel end-points must implement filters in accordance with mitigations defined in PPS Vulnerability Assessments.

From Perimeter Router Security Technical Implementation Guide Juniper

Associated with IA controls: ECSC-1

SV-20239r2_rule Tunnel end-points must implement filters in accordance with mitigations defined in PPS Vulnerability Assessments.

Vulnerability discussion

Allowing unknown traffic into the enclave creates high risk and potential compromise by an intruder. Protocols used by applications the PPSM has reviewed and determined to require additional mitigation is necessary to protect the GIG.

Check content

Review procedures defined in NET-TUNL-002. After determining the final decapsulation end-points, ensure the tunnel implements protocol inspection, filtering and mitigation as defined in the PPS VA reports.

Fix text

Ensure the tunnel implements protocol inspection, filtering and mitigation as defined in the PPS VA reports.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.