Details
The FA will ensure that if the firewall product operates on an OS platform, the host must be STIG compliant prior to the installation of the firewall product.
If the host that a firewall engine is operating on is not secured, the firewall itself is exposed to greater risk.
NOTE: This audit was specifically written for the Cisco ASA firewall appliance. Hence, the firewall software is likely not installed on an underlying host OS and is a software image created by Cisco Systems, Inc. Refer to the Cisco software documentation regarding software recommendations for your hardware platform to ensure the latest secure and stable version of the ASA software is installed. Further consultation with your applicable security policies and guidance may be required so the appropriate versions of software are installed.
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
The firewall administrator will install all patches that address IAVA.
Supportive Information
The following resource is also helpful.
This control applies to the following type of system Cisco.
References
- CAT|II
- Rule-ID|SV-4619r1_rule
- STIG-ID|NET0379
- Vuln-ID|V-4619