Home
Security Hardening
DISA STIG Cisco Firewall V8R25

DISA STIG Cisco Firewall V8R25

NET-SRVFRM-005 – The IAO will ensure the Server Farm VLANs are protected by severely restricting the actions hosts can perform on servers
Details The IAO will ensure the Server Farm VLANs are protected by severely restricting the actions the hosts can perform...
NET-TUNL-013 – L2TP must not pass into the private network of an enclave.
Details Unlike GRE (a simple encapsulating header) L2TP is a full-fledged communications protocol with control channel, data channels, and a...
NET-TUNL-020 – Teredo packets must be blocked inbound to the enclave and outbound from the enclave. – ‘outside in ACL’
Details Teredo (RFC 4380) is a tunneling mechanism that allows computers to encapsulate IPv6 packets inside IPv4 to traverse IPv4-only...
NET-TUNL-020 – Teredo packets must be blocked inbound to the enclave and outbound from the enclave. – ‘outside out ACL’
Details Teredo (RFC 4380) is a tunneling mechanism that allows computers to encapsulate IPv6 packets inside IPv4 to traverse IPv4-only...