BaselineWatch
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

SC-07(05) Deny by Default — Allow by Exception

NIST SP 800-53 (controls) 5.2.0 against 5.2.0
All changes in this version
unchanged SC Moderate baselineHigh baseline part of SC-7

Title

Deny by Default — Allow by Exception

Control

Deny network communications traffic by default and allow network communications traffic by exception [Selection (one or more): at managed interfaces; for {{ insert: param, sc-07.05_odp.02 }} ].

Discussion

Denying by default and allowing by exception applies to inbound and outbound network communications traffic. A deny-all, permit-by-exception network communications traffic policy ensures that only those system connections that are essential and approved are allowed. Deny by default, allow by exception also applies to a system that is connected to an external system.

Parameters

sc-07.05_odp.01: [at managed interfaces; for {{ insert: param, sc-07.05_odp.02 }} ]
sc-07.05_odp.02: systems

STIG rules that implement this control 1

Red Hat Enterprise Linux 10 V1R3