Skip to content
ATO Pathways
  Log In

I - Mission Critical Classified

Rules and Groups employed by this XCCDF Profile

  • NET1816

    <GroupDescription></GroupDescription>
    Group
    Show

  • Annual reviews must be performed on all Releasable Local Area Network (REL LAN) environments.

    &lt;VulnDiscussion&gt;The ISSM will ensure Releasable Local Area Network (REL LAN) reviews are performed annually.&lt;/VulnDiscussion&gt;&lt;FalseP...
    Rule Medium Severity
    Show

  • NET1826

    <GroupDescription></GroupDescription>
    Group
    Show

  • Enabling a connection that extends DISN IP network connectivity (e.g., NIPRNet and SIPRNet) to any DoD Vendor, Foreign, or Federal Mission Partner enclave or network without a signed DoD CIO approved sponsorship memo is prohibited. For classified connectivity it must be to a DSS approved contractor facility or DoD Component approved foreign government facility.

    &lt;VulnDiscussion&gt;Having a circuit provisioned that connects the SIPRNet enclave to a non-DoD, foreign, or contractor network puts the enclave ...
    Rule High Severity
    Show

  • NET1827

    <GroupDescription></GroupDescription>
    Group
    Show

  • Command and Control (C2) and non-C2 exceptions of SIPRNet must be documented in the enclaves accreditation package and an Authority to Connect (ATC) or Interim ATC amending the connection approval received prior to implementation.

    &lt;VulnDiscussion&gt;Any exception to use SIPRNet must be documented in an update to the enclave's accreditation package and an Authority to Conne...
    Rule Medium Severity
    Show

  • NET1832

    <GroupDescription></GroupDescription>
    Group
    Show

  • VPN gateways used to create IP tunnels to transport classified traffic across an unclassified IP network must comply with appropriate physical security protection standards for processing classified information.

    &lt;VulnDiscussion&gt;When transporting classified data over an unclassified IP network, it is imperative that the network elements deployed to pro...
    Rule Medium Severity
    Show

  • NET2000

    <GroupDescription></GroupDescription>
    Group
    Show

  • Multi-Protocol Labeled Switching (MPLS) protocols deployed to build Label-Switch Path (LSP) tunnels must authenticate all messages with a hash function using the most secured cryptographic algorithm available.

    &lt;VulnDiscussion&gt;Spoofed TCP segments could be introduced into the connection streams for LDP sessions used to build LSPs. By configuring stri...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules