STIGQter: STIG Summary: Intrusion Detection and Prevention Systems (IDPS) Security Requirements Guide Version: 2 Release: 6 Benchmark Date: 24 Jul 2020:

The IDPS must block any prohibited mobile code at the enclave boundary when it is detected.

DISA Rule

SV-45652r2_rule

Vulnerability Number

V-34743

Group Title

SRG-NET-000229-IDPS-00163

Rule Version

SRG-NET-000229-IDPS-00163

Severity

CAT II

CCI(s)

• CCI-001662 - The information system takes organization-defined corrective action when organization-defined unacceptable mobile code is identified.

Weight

10

Fix Recommendation

Configure the IDPS to block any prohibited mobile code at the enclave boundary when it is detected.

Check Contents

Verify the IDPS blocks any prohibited mobile code at the enclave boundary when it is detected.

If the IDPS does not block any prohibited mobile code at the enclave boundary when it is detected, this is a finding.

Vulnerability Number

V-34743

Documentable

False

Rule Version

SRG-NET-000229-IDPS-00163

Severity Override Guidance

Verify the IDPS blocks any prohibited mobile code at the enclave boundary when it is detected.

If the IDPS does not block any prohibited mobile code at the enclave boundary when it is detected, this is a finding.

Check Content Reference

M

Target Key

2358

Comments