GEN005580 - A system used for routing must not run other network services or applications.

Information

Installing extraneous software on a system designated as a dedicated router poses a security threat to the system and the network. Should an attacker gain access to the router through the unauthorized software, the entire network is susceptible to malicious activity.

Solution

Ensure only authorized software is loaded on a designated router. Authorized software will be limited to the most current version of routing protocols and SSH for system administration purposes.

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-32, CAT|II, CCI|CCI-001208, Rule-ID|SV-4398r2_rule, STIG-ID|GEN005580, Vuln-ID|V-4398

Plugin: Unix

Control ID: f86431a0222c51accdaaeba3d11efc7b1aa1f1f4c110d040f392f4a8d59eacf4