STIGQter: STIG Summary: Infoblox 8.x DNS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 09 Jan 2021:

The Infoblox system must notify the system administrator when a component failure is detected.

DISA Rule

SV-233895r621666_rule

Vulnerability Number

V-233895

Group Title

SRG-APP-000268-DNS-000039

Rule Version

IDNS-8X-400037

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.
• CCI-001328 - The organization, if an information system component failure is detected, activates an organization-defined alarm and/or automatically shuts down the information system.

Weight

10

Fix Recommendation

1. Navigate to Grid >> Grid Manager >> Grid Properties, or System >> System Manager >> System Properties if using a stand-alone configuration.
2. Select the Monitoring tab.
3. Enable "Log to External Syslog Servers" using the check box.
4. Configure an "External Syslog Server".
5. When complete, click "Save & Close" to save the changes and exit the "Properties" screen.
6. Perform a service restart if necessary.
7. Review the SYSLOG data on the remote SYSLOG server to validate operation.

Check Contents

Infoblox systems are capable of providing notifications via remote SYSLOG, SNMP, and SMTP.

1. Navigate to Grid >> Grid Manager >> Grid Properties, or System >> System Manager >> System Properties if using a stand-alone configuration.
2. Select the "Monitoring" tab.
3. Verify that "Log to External Syslog Servers" is enabled and an External Syslog Server is configured.
4. When complete, click "Cancel" to exit the "Properties" screen.

If no external notifications are enabled, this is a finding.

Vulnerability Number

V-233895

Documentable

False

Rule Version

IDNS-8X-400037

Severity Override Guidance

Infoblox systems are capable of providing notifications via remote SYSLOG, SNMP, and SMTP.

1. Navigate to Grid >> Grid Manager >> Grid Properties, or System >> System Manager >> System Properties if using a stand-alone configuration.
2. Select the "Monitoring" tab.
3. Verify that "Log to External Syslog Servers" is enabled and an External Syslog Server is configured.
4. When complete, click "Cancel" to exit the "Properties" screen.

If no external notifications are enabled, this is a finding.

Check Content Reference

M

Target Key

5251

Comments