Detections
Analytics

800-53|SC-7(11)

Title

RESTRICT INCOMING COMMUNICATIONS TRAFFIC

Description

The information system only allows incoming communications from [Assignment: organization-defined authorized sources] to be routed to [Assignment: organization-defined authorized destinations].

Supplemental

This control enhancement provides determinations that source and destination address pairs represent authorized/allowed communications. Such determinations can be based on several factors including, for example, the presence of source/destination address pairs in lists of authorized/allowed communications, the absence of address pairs in lists of unauthorized/disallowed pairs, or meeting more general rules for authorized/allowed source/destination pairs.

Reference Item Details

Related: AC-3

Category: SYSTEM AND COMMUNICATIONS PROTECTION

Parent Title: BOUNDARY PROTECTION

Family: SYSTEM AND COMMUNICATIONS PROTECTION

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.5.2.7 Set 'Inbound Connections' to 'Enabled:Block (default)'WindowsCIS Windows 8 L1 v1.0.0
1.1.5.3.11 Set 'Inbound Connections' to 'Enabled:Block (default)'WindowsCIS Windows 8 L1 v1.0.0
1.1.9.1 (L1) Ensure 'Lock Encrypted Media Extensions' is set to 'Enabled'WindowsCIS Mozilla Firefox ESR GPO v1.0.0 L1
1.1.17.2 (L1) Ensure 'Do not allow preferences to be changed' is set to 'Enabled'WindowsCIS Mozilla Firefox ESR GPO v1.0.0 L1
1.2.1 Ensure 'Permitted IP Addresses' is set to those necessary for device managementPalo_AltoCIS Palo Alto Firewall 7 Benchmark L1 v1.0.0
1.2.1 Ensure 'Permitted IP Addresses' is set to those necessary for device managementPalo_AltoCIS Palo Alto Firewall 6 Benchmark L1 v1.0.0
1.2.5 Set 'access-class' for 'line vty'CiscoCIS Cisco IOS 12 L1 v4.0.0
1.4 SNMP Security - b) SNMP serverZTE_ROSNGTenable ZTE ROSNG
1.16 CISC-RT-000260CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT II
1.17 CISC-RT-000270CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT II
1.19 CISC-RT-000260CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.20 CISC-RT-000260CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT II
1.20 CISC-RT-000260CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
1.20 CISC-RT-000270CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.21 CISC-RT-000270CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
1.21 CISC-RT-000270CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT II
1.22 CISC-RT-000350CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT II
1.23 CISC-RT-000360CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT III
1.24 CISC-RT-000370CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT III
1.25 CISC-RT-000380CiscoCIS Cisco NX OS Switch RTR STIG v1.1.0 CAT II
1.26 CISC-RT-000350CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT II
1.27 CISC-RT-000360CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT III
1.28 CISC-RT-000350CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.28 CISC-RT-000370CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT III
1.29 CISC-RT-000350CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
1.29 CISC-RT-000360CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT III
1.29 CISC-RT-000380CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT II
1.30 CISC-RT-000360CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT III
1.30 CISC-RT-000370CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT III
1.31 CISC-RT-000370CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT III
1.31 CISC-RT-000380CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.32 CISC-RT-000392CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT II
1.33 CISC-RT-000380CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
1.33 CISC-RT-000393CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT II
1.34 CISC-RT-000392CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.34 CISC-RT-000394CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT II
1.35 CISC-RT-000392CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
1.35 CISC-RT-000393CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.35 CISC-RT-000395CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT II
1.36 CISC-RT-000393CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
1.36 CISC-RT-000394CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.36 CISC-RT-000396CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT II
1.37 CISC-RT-000394CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
1.37 CISC-RT-000395CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.37 CISC-RT-000397CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT II
1.38 CISC-RT-000395CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
1.38 CISC-RT-000396CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II
1.38 CISC-RT-000398CiscoCIS Cisco IOS XE Switch RTR STIG v1.1.0 CAT II
1.39 CISC-RT-000396CiscoCIS Cisco IOS XE Router RTR STIG v1.1.0 CAT II
1.39 CISC-RT-000397CiscoCIS Cisco IOS XR Router RTR STIG v1.0.0 CAT II