This checklist is broken out between five sections and one appendix. Sections 3, 4, and 5 contain matrices that allow a reviewer to manually document details about the object of the SRR and the vulnerabilities discovered during the process of inspecting the network infrastructure. Section 3 details procedures for the reviewer on the subjects of network perimeter security, such as external connections, network layer addressing, standards for communication devices, routers, access control lists (ACLs), firewalls, network intrusion detection systems, data outlets and switches/VLANs. Section 4 details procedures for the reviewer on the subjects of remote access management. Section 5 details procedures for the reviewer on the subjects of network management, such as network management security and Virtual Private Networks (VPNs). Appendix A allows the reader to determine if SNMP is a vulnerability within the perimeter network architecture.

The procedures in this document are part of the effort to ensure that the security configuration guidelines required by Department of Defense (DOD) Directive 8500.1, Information Assurance, and other relevant guidance have been properly implemented.

Version 5 Release 2.3 - 2005-02-25