Skip to content

II - Mission Support Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-NET-000364-FW-000036

    Group
  • The Cisco ASA must be configured to forward management traffic to the Network Operations Center (NOC) via an IPsec tunnel.

    When the production network is managed in-band, the management network could be housed at a NOC that is located remotely at single or multiple interconnected sites. NOC interconnectivity, as well a...
    Rule Medium Severity
  • SRG-NET-000364-FW-000040

    Group
  • The Cisco ASA must be configured to inspect all inbound and outbound traffic at the application layer.

    Application inspection enables the firewall to control traffic based on different parameters that exist within the packets such as enforcing application-specific message and field length. Inspectio...
    Rule Medium Severity
  • SRG-NET-000364-FW-000041

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules