STIGQter: STIG Summary: IBM DataPower Network Device Management Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 24 Oct 2017:

The DataPower Gateway must employ automated mechanisms to centrally verify authentication settings.

DISA Rule

SV-79671r1_rule

Vulnerability Number

V-65181

Group Title

SRG-APP-000516-NDM-000338

Rule Version

WSDP-NM-000136

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.
CCI-000372 - Verify configuration settings for organization-defined system components using organization-defined automated mechanisms.

Weight

Fix Recommendation

Go to Administration >> Access >> RBM Settings. Set Authentication Method to LDAP.

Configure LDAP connection as needed. The connection will be verified.

Check Contents

Go to Administration >> Access >> RBM Settings. Verify Authentication Method is LDAP. If it is not, this is a finding.

Vulnerability Number

V-65181

Documentable

False

Rule Version

WSDP-NM-000136

Severity Override Guidance

Go to Administration >> Access >> RBM Settings. Verify Authentication Method is LDAP. If it is not, this is a finding.

Check Content Reference

Target Key

2861