STIGQter: STIG Summary: Network Infrastructure Policy Security Technical Implementation Guide Version: 9 Release: 10 Benchmark Date: 24 Jan 2020:

If a Secure File Transfer Protocol (SFTP) server is used to provide updates to the sensors, the server must be configured to allow read-only access to the files within the directory on which the signature packs are placed.

DISA Rule

SV-20041r2_rule

Vulnerability Number

V-18506

Group Title

Server is not configured to allow read-only access

Rule Version

NET-IDPS-029

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Modify the access restrictions to prevent the signatures from being updated.

Check Contents

If the signatures are located on a server, verify that the directories on which the signature packs are placed are protected by read-only access.

If the directories are not set for read-only access, this is a finding.

Vulnerability Number

V-18506

Documentable

False

Rule Version

NET-IDPS-029

Severity Override Guidance

If the signatures are located on a server, verify that the directories on which the signature packs are placed are protected by read-only access.

If the directories are not set for read-only access, this is a finding.

Check Content Reference

M

Target Key

838

Comments