V-222620
Application Security and Development Security Technical Implementation Guide
Title
Application web servers must be on a separate network segment from the application and database servers if it is a tiered application operating in the DoD DMZ.
Description
<VulnDiscussion>A tiered application usually consists of 3 tiers, the web layer (presentation tier), the application layer (application logic tier), and the database layer (data storage tier). Using one system for hosting all 3 tiers introduces risk that if one tier is compromised, there are no additional protection layers available to defend the other tiers. Security controls must be in place in order to provide different levels and types of defenses for each type of server based upon data pro...
Fix Text (Documentation Requirement)
Separate web server from other application tiers and place it on a separate network segment apart from the application and database servers in accordance with DoD DMZ data access controls requirements.