STIGQter: STIG Summary: Symantec ProxySG NDM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 24 Jan 2020:

Symantec ProxySG must support organizational requirements to conduct backups of system level information contained in the ProxySG when changes occur or weekly, whichever is sooner.

DISA Rule

SV-104519r1_rule

Vulnerability Number

V-94689

Group Title

SRG-APP-000516-NDM-000340

Rule Version

SYMP-NM-000190

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.
• CCI-000537 - The organization conducts backups of system-level information contained in the information system per organization-defined frequency that is consistent with recovery time and recovery point objectives.

Weight

10

Fix Recommendation

Configure backups for remote storage as follows.

1. Log on to the Web Management Console.
2. Click Configuration >> General >> Archive >> Archive Storage.
3. Provide the correct entries in the "Remote Upload" fields for an available remote backup storage server (Protocol, Host, Path, Username).
4. Click "Apply".

Note: Please see Chapter 5: Backing Up the Configuration in the ProxySG Administration Guide for complete details.

Check Contents

Symantec ProxySG supports backups natively. Verify that backups are being stored remotely.

1. Check with the Symantec ProxySG administrator to determine what their strategy is for backups.
2. Log on to the Web Management Console.
3. Click Configuration >> General >> Archive >> Archive Storage.
4. Confirm that there are entries in the "Remote Upload" fields (Host, Path, Username).

If Symantec ProxySG does not support organizational requirements to conduct backups of system level information contained in the Symantec ProxySG when changes occur or weekly, whichever is sooner, this is a finding.

Vulnerability Number

V-94689

Documentable

False

Rule Version

SYMP-NM-000190

Severity Override Guidance

Symantec ProxySG supports backups natively. Verify that backups are being stored remotely.

1. Check with the Symantec ProxySG administrator to determine what their strategy is for backups.
2. Log on to the Web Management Console.
3. Click Configuration >> General >> Archive >> Archive Storage.
4. Confirm that there are entries in the "Remote Upload" fields (Host, Path, Username).

If Symantec ProxySG does not support organizational requirements to conduct backups of system level information contained in the Symantec ProxySG when changes occur or weekly, whichever is sooner, this is a finding.

Check Content Reference

M

Target Key

3517

Comments