External connections to the network must be reviewed and the documentation updated semi-annually.

Severity	Group ID	Group Title	Version	Rule ID	Date	STIG Version
medium	V-251356	NET0135	NET0135	SV-251356r806023_rule	2024-08-02	10

Description
A network is only as secure as its weakest link. It is imperative that all external connections be reviewed and kept to a minimum needed for operations. All external connections should be treated as untrusted networks. Reviewing who or what the network is connected to empowers the security manager to make sound judgements and security recommendations. Minimizing backdoor circuits and connections reduces the risk for unauthorized access to network resources.

Description

A network is only as secure as its weakest link. It is imperative that all external connections be reviewed and kept to a minimum needed for operations. All external connections should be treated as untrusted networks. Reviewing who or what the network is connected to empowers the security manager to make sound judgements and security recommendations. Minimizing backdoor circuits and connections reduces the risk for unauthorized access to network resources.

ℹ️ Check
Review the network topology and interview the ISSO to verify that external connections to the network are reviewed and documented on a semi-annual basis. If there are any external connections that have not been documented, or if the connections are not reviewed on a semi-annual basis, this is a finding.

✔️ Fix
Implement a semi-annual review process to document and account for external connections to the organization.