topic Re: Port scanning test and report approved by GSA in Member Support

Port scanning test and report approved by GSA

dbohlmann — Thu, 09 Nov 2017 17:27:52 GMT

I don't know if there is such a thing, but I get asked from time to time if our products have been "GSA port scanned". Does the GSA have a document of recommendations or a framework or a toolset defined that I can run against my products to show 'compliance', or have some results? In the past we've had a few government facilities do their own scan and would/would not provide us results, depending. Is there a publicly available document that describes the requirements and "expected results"? Or is there really no such thing and it depends on the particular service or department (non-military)?

Re: Port scanning test and report approved by GSA

MrJackBadger — Sun, 12 Nov 2017 00:37:32 GMT

No such thing by standard. The closest you'll get is the FedRAMP process for cloud providers:

fedramp.gov

https://www.fedramp.gov/provide-public-comment/vulnerability-scanning-requirements-and-process-clarification/

ask your customers if that's what they mean.

Re: Port scanning test and report approved by GSA

dbohlmann — Tue, 14 Nov 2017 20:57:00 GMT

I will keep that in mind since we do have cloud services. Thanks.

The customer was asking in particular for a router that we make, though.