Best Practice Detail

13-8-8661

Network Operators and Service Providers should block tunneling protocols (for example, IP protocol 41 and UDP port 3544) at points where they should not be used. Tunnels can bypass firewall/perimeter security. Use static tunnels where the need for tunneling is known in advance.

Status: Rollover New

References/Comments: NIST SP 800-119 (Draft) 2.4

Historical events:

Network Operators
Service Providers
Cable
Internet/Data
Wireline
Cyber Security
Network Interoperability
Network Operations
Intrusion Detection
CSRIC VII: Rollover New In CSRIC VII