STIGQter STIGQter: STIG Summary: Infoblox 7.x DNS Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 22 Jan 2021:

The Infoblox NIOS version must be at the appropriate version.

DISA Rule

SV-214214r612370_rule

Vulnerability Number

V-214214

Group Title

SRG-APP-000516-DNS-000103

Rule Version

IDNS-7X-000860

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Log on to the support site and download the current version of NIOS and perform a Grid upgrade.

Refer to the Infoblox NIOS Administration Guide if necessary.

Check Contents

Infoblox systems utilize a modified version of BIND DNS software which adds features as well as addresses security issues outside of those provided by ISC. Infoblox systems are provided as a hardened appliance, and do not allow user access or upgrading of software components including BIND. The Infoblox support portal is the authoritative source to validate version and applicability of vulnerabilities.

Verify the NIOS version by review of "Grid, Upgrade" tab to show all members are at the current version.
Utilize the Infoblox support knowledgebase to obtain current version information.

If Infoblox NIOS is not at the current approved version level, this is a finding.

Vulnerability Number

V-214214

Documentable

False

Rule Version

IDNS-7X-000860

Severity Override Guidance

Infoblox systems utilize a modified version of BIND DNS software which adds features as well as addresses security issues outside of those provided by ISC. Infoblox systems are provided as a hardened appliance, and do not allow user access or upgrading of software components including BIND. The Infoblox support portal is the authoritative source to validate version and applicability of vulnerabilities.

Verify the NIOS version by review of "Grid, Upgrade" tab to show all members are at the current version.
Utilize the Infoblox support knowledgebase to obtain current version information.

If Infoblox NIOS is not at the current approved version level, this is a finding.

Check Content Reference

M

Target Key

3995

Comments