Check: ENTD0090
Test and Development Zone B STIG:
ENTD0090
(in versions v1 r6 through v1 r3)
Title
Development systems must have a firewall installed, configured, and enabled. (Cat II impact)
Discussion
A firewall provides a line of defense against malicious attacks. To be effective, it must be enabled and properly configured.
Check Content
Review the development images to determine whether the OS or a third party firewall has been installed, configured, and enabled. If a firewall is not installed, configured, and enabled, this is a finding. If there isn't any application development occurring in the zone environment, this requirement is not applicable.
Fix Text
Install, configure, and enable either the OS or a third party firewall on the development system.
Additional Identifiers
Rule ID: SV-51297r1_rule
Vulnerability ID: V-39439
Group Title: ENTD0090 - A firewall is not present on the development system.
Expert Comments
CCIs
Number | Definition |
---|---|
No CCIs are assigned to this check |
Controls
Number | Title |
---|---|
No controls are assigned to this check |