STIGQter: STIG Summary: McAfee MOVE AV Multi-Platform 4.5 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 27 Jul 2018:

All other anti-virus products must be removed from the virtual machine while the McAfee AV Client is running.

DISA Rule

SV-93223r1_rule

Vulnerability Number

V-78517

Group Title

MV45-GEN-000001

Rule Version

MV45-GEN-000001

Severity

CAT II

CCI(s)

• CCI-000381 - The organization configures the information system to provide only essential capabilities.

Weight

10

Fix Recommendation

Click on Start >> Control Panel. Choose "Uninstall a program" under the "Programs" section.

Locate the installed antivirus product, other than the McAfee MOVE AV Client, and choose to uninstall it.

Check Contents

Access the system to which the McAfee MOVE Client is installed. In the taskbar, right-click the red McAfee Agent shield and select "About".

Ensure neither the "McAfee VirusScan Enterprise + AntiSpyware Enterprise" nor the "Symantec Plugin" is listed as an installed product.

Access "services.msc" and review the services running on the system.

Ensure no other antivirus products are installed.

If either the "McAfee VirusScan Enterprise + AntiSpyware Enterprise" or the "Symantec Plugin" is listed as an installed product in the McAfee Agent "About" dialog box, this is a finding.

If neither the "McAfee VirusScan Enterprise + AntiSpyware Enterprise" nor the "Symantec Plugin" is listed as an installed product, but another antivirus product is shown as running as a service on this system, this is a finding.

Vulnerability Number

V-78517

Documentable

False

Rule Version

MV45-GEN-000001

Severity Override Guidance

Access the system to which the McAfee MOVE Client is installed. In the taskbar, right-click the red McAfee Agent shield and select "About".

Ensure neither the "McAfee VirusScan Enterprise + AntiSpyware Enterprise" nor the "Symantec Plugin" is listed as an installed product.

Access "services.msc" and review the services running on the system.

Ensure no other antivirus products are installed.

If either the "McAfee VirusScan Enterprise + AntiSpyware Enterprise" or the "Symantec Plugin" is listed as an installed product in the McAfee Agent "About" dialog box, this is a finding.

If neither the "McAfee VirusScan Enterprise + AntiSpyware Enterprise" nor the "Symantec Plugin" is listed as an installed product, but another antivirus product is shown as running as a service on this system, this is a finding.

Check Content Reference

M

Target Key

3233

Comments