Matching L3SSg2AC-b

URI: MP-L3SSg2AC-b

Package: NetworkConnectivity

< prev | next >

Description: Finds a gateway from one IP subnet to an IP subnet, along with the segment asset representing the route via the gateway, and a context in which the gateway is connected to both subnets, where this route is not blocked by default.

Root Pattern: R-L3SSg2AC

R-L3SSg2AC

Finds a gateway from one IP subnet to an IP subnet, along with the segment asset representing the route via the gateway, and a context in which the gateway is connected to both subnets.

Threat Patterns (1)

Sg.DA.L3SSg2AC-b.1

Routing between FromSubnet and ToSubnet re-disabled at Gateway: if an attacker has admin rights on host Gateway in a context where it is connected to FromSubnet and ToSubnet, then they can override a default policy to drop connection being routed between those subnets.