The SA must configure the firewall for the minimum content and protocol inspection requirements.

From Firewall Security Technical Implementation Guide - Cisco

Part of Firewall inspection is not performed adequately

SV-15269r2_rule The SA must configure the firewall for the minimum content and protocol inspection requirements.

Vulnerability discussion

Creating a filter to allow a port or service through the firewall without content or protocol inspection creates a direct connection between the host in the private network and a host on the outside; thereby, bypassing additional security measures that could be provided. This places the internal host at a greater risk of exploitation that could make the entire network vulnerable to an attack.

Check content

Review the firewall configuration and verify both ingress and egress traffic is being inspected. If any traffic is able to leave or enter the enclave without being inspected by the firewall, this is a finding.

Fix text

Ensure the firewall has content and protocol inspection implemented for all ingress and egress traffic.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.