NET0770 - IP Source Routing is not disabled on all routers.

Information

The router must have IP source routing disabled.

Source routing is a feature of IP, whereby individual packets can specify routes. This feature is used in several different network attacks by bypassing perimeter and internal defense mechanisms.

Solution

Configure the router to disable IP source routing.

See Also

https://iasecontent.disa.mil/stigs/zip/U_Network_Perimeter_Router_L3_Switch_V8R32_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7, CAT|II, Rule-ID|SV-3081r3_rule, STIG-ID|NET0770, Vuln-ID|V-3081

Plugin: Cisco

Control ID: b224a70ca5f4a2151f05f993f7adccf7ff27b7a665bcda4f9ec2fb6d7df8579f