Title: Boundary protection applications must fail securely in the event of an operational failure.
Vulnerability ID: V-32558
IA Controls: None
Description: Fail secure is a condition achieved by the application of a set of information system mechanisms to ensure that in the event of an operational failure of a boundary protection device at a managed interface (e.g., router, firewall, guard, application gateway residing on a protected sub network commonly referred to as a demilitarized zone), the system does not enter into an unsecure state where intended security properties no longer hold. A failure of a boundary protection device cannot lead to, or cause information external to the boundary protection device to enter the device, nor can a failure permit unauthorized information release.
This requirement applies to applications designed for boundary protection and is NA for databases.
Check Text: This check is NA for databases.
Fix Text: This fix is NA for databases.[divider]