Title

The test and development infrastructure must use a firewall for traffic inspection to and from DoD operational networks. (Cat I impact)

Discussion

A firewall is necessary to inspect traffic as it flows into and out of the test and development environment. Without a firewall present, traffic could flow freely between the operational network and test and development environment, allowing malicious or other unintended traffic and unauthorized access, compromising a system or environment.

Check Content

Install and configure a firewall to separate DoD operational and test and development environments.

Fix Text

Install and configure a firewall to separate DoD operational and test and development environments.

Additional Identifiers

Rule ID: SV-51494r1_rule

Vulnerability ID: V-39636

Group Title: ENTD0180 - A firewall has not been installed to protect the test and development environment.

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.